BreachOfPrivacy
Decisions/Federal (Canada)

Federal (Canada) Privacy Decisions

Browse privacy decisions from Federal (Canada) — with AI-generated plain-language summaries for every ruling.

1 decision matching
Federal (Canada)Personal Information Protection and Electronic Documents ActWell-founded & resolved
Dec 21, 2004Incident Summary #1· Indexed Apr 12, 2026

Incident Summary #1: Misdirected faxes containing health information end up in apartment managers' hands

Dynacare

The OPC investigated two separate incidents where health information was sent by facsimile to the wrong recipient. In the first incident, Dynacare sent a misdirected fax containing personal health information. In the second incident, Viewpoint sent a medical evaluation to an incorrect number. Both companies were found to have contravened PIPEDA by disclosing personal information without consent. Recommendations were made to both companies regarding faxing procedures, employee training, and notification of affected individuals.

Quick View

Personal Information Protection and Electronic Documents ActWell-founded & resolved

Incident Summary #1: Misdirected faxes containing health information end up in apartment managers' hands

Dec 21, 2004Incident Summary #1
Adjudicator: Jennifer Stoddart
Plain-Language Summary

The OPC investigated two separate incidents where health information was sent by facsimile to the wrong recipient. In the first incident, Dynacare sent a misdirected fax containing personal health information. In the second incident, Viewpoint sent a medical evaluation to an incorrect number. Both companies were found to have contravened PIPEDA by disclosing personal information without consent. Recommendations were made to both companies regarding faxing procedures, employee training, and notification of affected individuals.

Key Issues
  • Disclosure of personal health information without consent via misdirected facsimile transmission
  • Responsibility for and accountability of employees in faxing personal information
  • Adequacy of organizational policies and procedures for protecting personal information during transmission
  • Notification of individuals whose personal information has been disclosed