BreachOfPrivacy
Office of the Privacy Commissioner of CanadaPersonal Information Protection and Electronic Documents ActSettled Case summary #29Settled
Flag of Canada

Settled case summary #29 — A department store

Organization: A department store
Decision: Feb 5, 2007Published: Feb 5, 2007

An individual complained that a department store's method for collecting provincial tax exemption information exposed customers' personal data to other customers. The store used a petition-style form where multiple customers' information was visible. Following the complaint, the store revised its process by implementing a new form and reconfiguring cash registers to generate individual receipts that were then secured. The complainant was satisfied with the changes, and the matter was settled.

  • Visibility of personal information to other customers
  • Safeguarding of personal information during collection
  • Adequacy of corrective measures to protect privacy

Complaint settled during the investigation

The store took satisfactory steps to address the privacy risks by changing its collection method and securing the information, leading the complainant to consider the matter settled.

AI-generated summary for reference only. Always verify against the official decision ↗

Recommended action / remedy

The department store revised its collection process to ensure customer information was not visible to others and was properly secured.

Statutory provisions cited
  • Principle 4.9 PIPEDA

This summary is informational only and not legal advice.