Browse privacy decisions from Federal (Canada) — with AI-generated plain-language summaries for every ruling.
The OIC ordered Transport Canada to provide a complete response to the access request no later than the 36th business day following the date of the final report..
The OIC ordered Canada Border Services Agency to provide a complete response to the access request no later than the 36th business day following the date of the final report..
The OIC ordered National Defence to provide a complete response to the access request no later than 60 business days after the date of the final report..
The OIC ordered Health Canada to provide a complete response to the access request no later than the 36th business day following the date of the final report..
The complainant alleged that the Impact Assessment Agency of Canada (IAAC) had improperly withheld information related to its 2020-2021 inspection plan. The IAAC withheld information under numerous sections of the Access to Information Act, including exemptions related to federal-provincial affairs, investigations, third-party commercial information, and advice/deliberations. The Information Commissioner found that the IAAC failed to demonstrate that the exemptions were properly applied in many instances and did not adequately exercise its discretion to disclose information. Consequently, the Commissioner ordered the IAAC to disclose significant portions of the withheld information.
The OIC ordered Environment and Climate Change Canada to provide a complete response to the access request no later than the 60th business day following the date of the final report..
The OIC ordered Privy Council Office to provide a complete response to the access request no later than the 36th business day following the date of the final report..
The OIC ordered Transport Canada to provide a complete response to the access request no later than the 36th business day following the date of the final report..
The OIC ordered Transport Canada to provide a complete response to the access request no later than the 36th business day following the date of the final report..
The OIC ordered Health Canada to provide a complete response to the access request no later than the 60th business day after the date of the final report..
The OIC ordered Health Canada to provide a complete response to the access request no later than December 22, 2025..
The OIC ordered Transport Canada to provide a complete response to the access request no later than the 36th business day following the date of the final report..
OIC order issued to Public Services and Procurement Canada.
This joint investigation by the Privacy Commissioner of Canada (OPC) and the UK Information Commissioner (ICO) examined a significant data breach at 23andMe, which affected nearly 7 million customers globally. The investigation found that 23andMe failed to implement appropriate safeguards to protect sensitive personal information, including genetic data, from a credential stuffing attack. Furthermore, the company's notifications to both regulatory bodies and affected individuals were found to be inadequate in content and, in some cases, timeliness. Although contraventions were found, the issues were deemed resolved due to significant security improvements made by 23andMe.
The OIC ordered Library and Archives Canada to provide a complete response to the access request no later than the 36th business day following the date of the final report..
Federal (Canada)
Ontario
British Columbia
Alberta
Saskatchewan
Manitoba
Quebec
Nova Scotia
New Brunswick
Prince Edward Island
Newfoundland and Labrador