← Back to catalogue/Federal (Canada)PIPEDA Findings #2019-005
Federal (Canada)Personal Information Protection and Electronic Documents ActWell-founded & conditionally resolved

PIPEDA Findings #2019-005: 411Numbers ceases practice of removing information for a fee

Organization: 411NumbersComplainant: Anonymous applicant
Plain-language brief

The complaint concerned 411Numbers, an operator of websites providing free access to telephone numbers and associated information, including unlisted numbers, and formerly charging a fee for removal. The complainant alleged collection without consent, use for an inappropriate purpose (paid removal), over-collection of information for removal services, and unresponsiveness to privacy queries. The OPC asserted jurisdiction over 411Numbers due to a 'real and substantial connection' to Canada, despite its Hong Kong incorporation. The OPC found that 411Numbers contravened Principle 4.3 by publishing unlisted numbers without consent, as they are not 'publicly available' under the Regulations. The practice of charging for removal ceased during the investigation, resolving that aspect, though the OPC noted it would likely be an inappropriate purpose. The OPC also found contraventions of Principle 4.3.3 for over-collecting identification for removal requests and Principles 4.1, 4.1.2, 4.1.4, 4.8, and 4.10 regarding accountability, openness, and challenging compliance. Based on 411Numbers' commitments to remove unlisted data, improve due diligence, and enhance its privacy practices, the matter was deemed well-founded and conditionally resolved.

Key issues
  1. 1Whether the OPC had jurisdiction over 411Numbers, a Hong Kong-incorporated company with servers outside Canada, due to a 'real and substantial connection' to Canada.
  2. 2Whether 411Numbers collected, used, and disclosed the complainant's personal information (unlisted phone number, name, address) without knowledge and consent, contravening Principle 4.3.
  3. 3Whether information associated with unlisted telephone numbers constitutes 'publicly available' information under paragraph 1(a) of the Regulations Specifying Publicly Available Information.
  4. 4Whether 411Numbers exercised due diligence to ensure its databases did not include unlisted numbers.
  5. 5Whether publishing personal information for the purpose of encouraging individuals to pay to have it removed constitutes an inappropriate purpose under s. 5(3) of PIPEDA.
  6. 6Whether 411Numbers required individuals to provide more information than necessary for removal services, contravening Principle 4.3.3.
  7. 7Whether 411Numbers met its obligations regarding accountability under Principles 4.1, 4.1.2, and 4.1.4.
  8. 8Whether 411Numbers met its obligations regarding openness under Principle 4.8 and 4.8.3.
  9. 9Whether 411Numbers met its obligations regarding challenging compliance under Principle 4.10.
Outcome breakdownFavours: Applicant / complainant
  • Jurisdiction: Jurisdiction asserted over 411Numbers
  • Collection without consent: Contravention of Principle 4.3 found for publishing unlisted numbers
  • Purpose of collection: Issue of charging for removal resolved during investigation
  • Over-collection: Contravention of Principle 4.3.3 found for over-collecting identification
  • Accountability and openness: Contraventions of Principles 4.1, 4.1.2, 4.1.4, 4.8, and 4.10 found
  • Resolution: Matter deemed well-founded and conditionally resolved
Outcome

Complaint well-founded and conditionally resolved

Reasoning

The OPC found multiple contraventions of PIPEDA, particularly concerning the publication of unlisted numbers without consent and failures in accountability. However, 411Numbers committed to specific corrective actions, including removing unlisted numbers, implementing due diligence, and enhancing accountability and openness, leading to a conditional resolution.

AI-generated summary for reference only. Always verify against the official decision ↗
Decision notes
Recommended action / remedy

The Commissioner recommended that 411Numbers remove all unlisted numbers from its websites, implement due diligence measures for future data acquisition, revise its privacy policy, establish proper complaint handling procedures, and train staff on PIPEDA obligations.

Statutes considered
  • s.2(1) PIPEDA
  • s.5(3) PIPEDA
  • s.7(1)(d) PIPEDA
  • s.7(2)(c.1) PIPEDA
  • s.7(3)(h.1) PIPEDA
  • Principle 4.1 PIPEDA
  • Principle 4.1.2 PIPEDA
  • Principle 4.1.4 PIPEDA
  • Principle 4.3 PIPEDA
  • Principle 4.3.3 PIPEDA
  • Principle 4.8 PIPEDA
  • Principle 4.8.3 PIPEDA
  • Principle 4.10 PIPEDA
  • paragraph 1(a) of the Regulations Specifying Publicly Available Information

This summary is informational only and not legal advice.

Pro · AI

Decisions with similar reasoning and facts — found by AI across statutes and jurisdictions, not just keywords.

Pro
Coverage — 13 of 14 jurisdictions searchable

Fully searchable: Ontario, British Columbia, Alberta, Saskatchewan, Newfoundland and Labrador, Northwest Territories, New Brunswick, Manitoba.

Partial (recent decisions only): Federal (Canada) (651 of 1,631), Nova Scotia (49 of 472), Quebec (6 of 7,090), Prince Edward Island (2 of 279), Yukon (1 of 75).

Coming soon: Nunavut — being re-processed for AI search.

Find decisions like this one — by meaning, not keywords.

Related by meaning is a Pro feature. Upgrade to surface conceptually similar decisions across the corpus, powered by AI.

Upgrade to Pro