← Back to catalogue/Federal (Canada)Early resolved case summary #2017-001
Federal (Canada)Personal Information Protection and Electronic Documents ActEarly-resolved

Early resolved case summary #2017-001: Privacy obligations under PIPEDA apply to financial technology sector

Organization: A FinTech organizationComplainant: Anonymous applicant
Plain-language brief

A complainant sought to open an online financial investment account with a FinTech organization. To access the investment account management agreement, the complainant was required to provide personal information, some of which was sensitive. After reviewing the agreement, the complainant decided not to open an account and requested deletion of their personal information. The organization cited "regulatory requirements" for the collection. The OPC clarified that while regulatory requirements exist, they apply once an individual becomes a client, not before. The OPC advised the organization to revise its website so prospective clients could review the agreement without prior personal information disclosure. The organization agreed to revise its website and Privacy Policy, leading to an early resolution.

Key issues
  1. 1Whether a FinTech organization can require personal information before a prospective client reviews terms and conditions
  2. 2Whether consent under PIPEDA is meaningful if personal information is collected before a user can review service agreements
  3. 3Whether regulatory requirements justify collecting personal information from prospective clients who do not proceed with opening an account
Outcome breakdownFavours: Applicant / complainant
  • Collection of personal information: Collection before client status deemed unnecessary
  • Website revision: Organization agreed to revise website
  • Privacy Policy revision: Organization agreed to revise Privacy Policy
  • Complaint resolution: Early resolution achieved
Outcome

Complaint early resolved

Reasoning

The organization agreed to revise its website and Privacy Policy to allow prospective clients to review terms without first providing personal information, satisfying the complainant and addressing the OPC's concerns about meaningful consent.

AI-generated summary for reference only. Always verify against the official decision ↗
Decision notes
Recommended action / remedy

The organization agreed to revise its website and Privacy Policy to ensure prospective clients can review the management agreement without first providing personal information.

This summary is informational only and not legal advice.

Pro · AI

Decisions with similar reasoning and facts — found by AI across statutes and jurisdictions, not just keywords.

Pro
Coverage — 13 of 14 jurisdictions searchable

Fully searchable: Ontario, British Columbia, Alberta, Saskatchewan, Newfoundland and Labrador, Northwest Territories, New Brunswick, Manitoba.

Partial (recent decisions only): Federal (Canada) (651 of 1,631), Nova Scotia (49 of 472), Quebec (6 of 7,090), Prince Edward Island (2 of 279), Yukon (1 of 75).

Coming soon: Nunavut — being re-processed for AI search.

Find decisions like this one — by meaning, not keywords.

Related by meaning is a Pro feature. Upgrade to surface conceptually similar decisions across the corpus, powered by AI.

Upgrade to Pro