Canadian Privacy Decisions

An individual complained that a telecommunications company failed to obtain adequate consent for the secondary marketing use and disclosure of customer data. The investigation found that the company's privacy code, policy, and customer activation process sufficiently informed customers of its marketing practices and their right to opt-out. The company also complied with CRTC restrictions on disclosing customer information. As a result, the Assistant Privacy Commissioner concluded that the company was in compliance with PIPEDA.

• Adequacy of consent for secondary marketing purposes
• Clarity and accessibility of privacy policies
• Company's process for informing customers of data use and opt-out options