Settled case summary #25 — A restaurant

The Office of the Privacy Commissioner of Canada (OPC) investigated a complaint from an individual concerned that her credit card receipt contained her name, credit card number, and expiry date. The OPC found that while the restaurant's equipment did not mask this information, it was collected, used, and stored in a manner consistent with privacy principles, and there was no unauthorized disclosure. The matter was settled when the complainant was informed that industry-wide masking of credit card receipts was expected by 2007.

• Collection, use, and storage of credit card information on receipts
• Adequacy of credit card receipt masking technology
• Compliance with privacy principles despite lack of masking