← Back to catalogue/Federal (Canada)Settled Case summary #24
Federal (Canada)Personal Information Protection and Electronic Documents ActSettled

Settled case summary #24 — A web-based company

Organization: A web-based companyComplainant: Anonymous applicant
Plain-language brief

An individual complained that a web-based company retained his personal information for too long after he cancelled his free trial membership. He also alleged that the company lacked accountability under PIPEDA, as it did not fully answer his privacy questions and had no designated privacy officer. The company explained that it retained personal information, including credit card details, to process rental requests, ship items, and prevent fraud, particularly to track individuals attempting to obtain multiple free trials. As a result of the complaint, the company revised its privacy policy to clarify retention purposes and periods for different types of information. It also trained its customer service staff and designated a privacy officer. The complainant was satisfied with these changes.

Key issues
  1. 1Whether the web-based company retained personal information for too long after a free trial cancellation
  2. 2Whether the web-based company was fully accountable under PIPEDA
  3. 3Whether the web-based company adequately answered privacy-related questions
  4. 4Whether the web-based company had a designated person responsible for handling privacy issues
Outcome breakdownFavours: Applicant / complainant
  • Retention of personal information: Company revised policy and practices
  • Accountability for privacy: Company designated privacy officer and trained staff
Outcome

Complaint settled — company revised privacy policy and designated a privacy officer

Reasoning

The company took satisfactory corrective actions during the investigation by revising its privacy policy, clarifying retention periods, training staff, and designating a privacy officer, which resolved the complainant's concerns.

AI-generated summary for reference only. Always verify against the official decision ↗
Decision notes
Recommended action / remedy

The company revised its privacy policy to clarify retention purposes and periods, trained customer service staff, and designated a privacy officer.

This summary is informational only and not legal advice.

Pro · AI

Decisions with similar reasoning and facts — found by AI across statutes and jurisdictions, not just keywords.

Pro
Coverage — 13 of 14 jurisdictions searchable

Fully searchable: Ontario, British Columbia, Alberta, Saskatchewan, Newfoundland and Labrador, Northwest Territories, New Brunswick, Manitoba.

Partial (recent decisions only): Federal (Canada) (651 of 1,631), Nova Scotia (49 of 472), Quebec (6 of 7,090), Prince Edward Island (2 of 279), Yukon (1 of 75).

Coming soon: Nunavut — being re-processed for AI search.

Find decisions like this one — by meaning, not keywords.

Related by meaning is a Pro feature. Upgrade to surface conceptually similar decisions across the corpus, powered by AI.

Upgrade to Pro