BreachOfPrivacy
Decisions/Federal (Canada)/Personal Information Protection and Electronic Documents Act/Settled case summary #4 — A federally regulated transportation company
Office of the Privacy Commissioner of CanadaPersonal Information Protection and Electronic Documents ActSettled Case summarySettled
Flag of Canada

Settled case summary #4 — A federally regulated transportation company

Organization: A federally regulated transportation company
Decision: Nov 5, 2004Published: Nov 5, 2004

Employees complained that a list containing their names, identification and seniority numbers, and social insurance numbers (SINs) was shared with their union without their knowledge or consent. The company admitted fault, stating the SIN was inadvertently included on one list and was visible on another shared with the union. The company implemented changes, including no longer requiring SINs for severance applications and amending consent forms for sharing employee information with the union.

  • Disclosure of personal information to a third party (union)
  • Inclusion of SIN on employee lists
  • Lack of employee consent for disclosure

Complaint settled

The matter was settled during the investigation when the company agreed to implement corrective measures, including amending its application and consent processes.

AI-generated summary for reference only. Always verify against the official decision ↗

Recommended action / remedy

The company amended its severance application process and its consent forms for sharing employee information with the union.

This summary is informational only and not legal advice.