Canada Post collection of online signatures for mail tracking draws complaint
Canada Post's collection of electronic signatures for mail tracking was investigated following a complaint. The OPC found that Canada Post's collection, use, and disclosure of signatures for tracking purposes complied with the Privacy Act, as it was consistent with the original purpose of collection and a permitted disclosure under paragraph 8(2)(a) of the Act. However, the OPC identified shortcomings in the security and privacy controls of Canada Post's online tracking website and made recommendations for improvement, which Canada Post accepted.
- Adequacy of notice provided to individuals regarding the collection, use, and disclosure of their electronic signatures.
- Compliance with the Privacy Act regarding the collection, use, and disclosure of personal information.
- Adequacy of security and privacy controls for digitized signatures displayed on Canada Post's online tracking website.
Complaint partially not well-founded and partially conditionally resolved.
The OPC found that Canada Post's collection and disclosure of signatures for tracking purposes were consistent with the Act, but that the institution had not adequately safeguarded the digitized signatures displayed online, leading to a conditionally resolved outcome.
AI-generated summary for reference only. Always verify against the official decision ↗
Canada Post was required to implement enhanced privacy and security controls for digitized signatures displayed online and to ensure consistency in signage across all postal outlets.
- s. 3 Privacy Act
- s. 4 Privacy Act
- s. 7 Privacy Act
- s. 8 Privacy Act
- para. 8(2)(a) Privacy Act
This summary is informational only and not legal advice.