PIPEDA findings #2017-010: Reasons for retaining customer credit card data explained
A complainant objected to a retail store retaining records of her credit card transactions after she requested their deletion. The store initially cited contractual obligations to credit card companies, but later informed the OPC that the Excise Tax Act also legally required data retention. The OPC relayed this explanation to the complainant, who found it satisfactory, and the matter was resolved.
- Right to withdraw consent vs. legal and contractual retention obligations
- Adequacy of explanation provided to complainant
Complaint resolved
The matter was resolved when the Office provided the complainant with a satisfactory explanation for the data retention practices, citing both contractual and legal obligations.
AI-generated summary for reference only. Always verify against the official decision ↗
The Office facilitated a resolution by clarifying the legal and contractual basis for the retail store's data retention practices.
- Consent principle PIPEDA
This summary is informational only and not legal advice.