Early resolved case summary #2016-02: Organization’s technical glitch results in the disclosure of a client’s personal information to another client
An individual complained to the OPC after an online service company failed to resolve a technical glitch that caused another person's personal information to appear in his account. Despite months of attempts, the company's customer service and IT specialists could not fix the issue, nor could the individual escalate his concerns to a privacy officer. The OPC intervened, prompting the company to investigate and discover the glitch originated from another organization's software interface. The online company, in collaboration with the other organization, corrected the technical glitch for all users. The online company also revised its internal policies to include an escalation process for privacy concerns and established a new contractual agreement with the other organization to prevent future issues and enhance PIPEDA compliance. The complainant confirmed the issue was resolved to his satisfaction.
- 1Whether an online service company adequately addressed a technical glitch leading to unauthorized disclosure of personal information
- 2Whether the online service company had appropriate internal policies for escalating privacy concerns
- 3Whether the online service company had adequate contractual agreements with third-party service providers regarding privacy and data breaches
- Technical glitch resolution: Glitch corrected for all users
- Internal policy revision: Escalation process for privacy concerns established
- Contractual agreement: New agreement to prevent future issues and enhance PIPEDA compliance
- Complaint resolution: Issue resolved to complainant's satisfaction
Complaint early resolved
The complaint was resolved early in the OPC's investigation after the online company took immediate action to fix the technical glitch, revise its internal policies, and establish a new contractual agreement with the third-party organization, satisfying the complainant.
The online company changed its internal policies and procedures for handling privacy concerns, collaborated with the other organization to fix the technical glitch, and developed a multi-year contractual agreement with the other organization to cover technical issues and enhance PIPEDA compliance.
This summary is informational only and not legal advice.
Related by meaning
Decisions with similar reasoning and facts — found by AI across statutes and jurisdictions, not just keywords.
Coverage — 13 of 14 jurisdictions searchable
Fully searchable: Ontario, British Columbia, Alberta, Saskatchewan, Newfoundland and Labrador, Northwest Territories, New Brunswick, Manitoba.
Partial (recent decisions only): Federal (Canada) (651 of 1,631), Nova Scotia (49 of 472), Quebec (6 of 7,090), Prince Edward Island (2 of 279), Yukon (1 of 75).
Coming soon: Nunavut — being re-processed for AI search.
Find decisions like this one — by meaning, not keywords.
Related by meaning is a Pro feature. Upgrade to surface conceptually similar decisions across the corpus, powered by AI.
Upgrade to Pro