Mishandling employees’ personal information – RCMP
The complainant alleged that the RCMP inappropriately used employees' personal information during a training course. The RCMP used real personal information from 91 employees for a data entry exercise without their consent and without advising participants of the data's sensitive nature. The RCMP acknowledged the contravention of section 7 of the Privacy Act and notified the affected employees.
- Use of personal information for training purposes without consent
- Adequacy of notification to affected individuals
- Consistency of use with the original purpose of collection
Complaint well-founded — corrective measures taken
The RCMP admitted that using employees' personal information for training was not an authorized use under section 7 of the Privacy Act, confirming the complaint was well-founded. However, the RCMP took corrective action by notifying all affected employees, leading to a resolved outcome.
AI-generated summary for reference only. Always verify against the official decision ↗
All 91 affected employees were notified by letter of the breach of their personal information.
- s. 7 Privacy Act
- s. 3 Privacy Act
This summary is informational only and not legal advice.