← Back to catalogue/Federal (Canada)Settled Case summary #28
Federal (Canada)Personal Information Protection and Electronic Documents ActSettled

Settled case summary #28 — A DVD-rental store

Organization: A DVD-rental storeComplainant: Anonymous applicant
Plain-language brief

An individual complained that a DVD-rental store required him to provide his driver's license details for entry into their database to become a member, which he believed was unnecessary. The store initially argued this was a business necessity for identity verification and recovering overdue rentals. However, the investigation revealed the store did not use driver's license data for tracing members, but rather publicly available information. Recognizing it was collecting unnecessary information, the store revised its membership process. Under the new process, customers must present two pieces of identification, one with a photo, but driver's license details are no longer entered into the database. The store committed to updating its procedures and training staff on the new process.

Key issues
  1. 1Whether collecting and recording driver's license details was necessary for the DVD-rental store's operations
  2. 2Whether the store's collection practices aligned with the principle of limiting collection to necessary information
Outcome breakdownFavours: Applicant / complainant
  • Collection of personal information: Collection deemed unnecessary
  • Business practices: Store revised membership process
  • Future compliance: Store committed to updating procedures and training
Outcome

Complaint settled — store revised its membership application process

Reasoning

The complaint was settled after the investigation revealed the store was collecting personal information (driver's license details) that it did not actually use for its stated purposes, leading the store to revise its practices.

AI-generated summary for reference only. Always verify against the official decision ↗
Decision notes
Recommended action / remedy

The DVD-rental store revised its membership application process to no longer require the entry of driver's license details into its database, instead requiring two pieces of identification, one with a photo, and only recording that photo identification was verified. The company also committed to reviewing the new process with staff and updating its procedures manual.

Statutes considered
  • Principle 4.4 PIPEDA

This summary is informational only and not legal advice

Pro · AI

Decisions with similar reasoning and facts — found by AI across statutes and jurisdictions, not just keywords.

Pro
Coverage — 13 of 14 jurisdictions searchable

Fully searchable: Ontario, British Columbia, Alberta, Saskatchewan, Newfoundland and Labrador, Northwest Territories, New Brunswick, Manitoba.

Partial (recent decisions only): Federal (Canada) (651 of 1,631), Nova Scotia (49 of 472), Quebec (6 of 7,090), Prince Edward Island (2 of 279), Yukon (1 of 75).

Coming soon: Nunavut — being re-processed for AI search.

Find decisions like this one — by meaning, not keywords.

Related by meaning is a Pro feature. Upgrade to surface conceptually similar decisions across the corpus, powered by AI.

Upgrade to Pro