Settled case summary #24 — A web-based company

An individual complained that a web-based company retained his personal information for too long after cancelling his free trial membership. The complainant also alleged the company lacked accountability as it did not answer all his privacy questions and had no designated privacy officer. As a result of the complaint, the company revised its privacy policy to clarify retention periods and purposes, and designated a privacy officer. The complainant was satisfied with these changes, and the complaint was settled.

• Excessive retention of personal information
• Lack of accountability and designated privacy officer