Canadian Privacy Decisions

A complainant alleged that Correctional Service of Canada (CSC) denied him access to the full version of a report concerning his treatment and supervision. CSC initially provided a condensed version, which the OPC found to be a misrepresentation of the information and contrary to CSC's obligations under the Privacy Act. Following the OPC's investigation, CSC provided the complainant with the full report, with some personal information of other parties withheld, and committed to reviewing its access request handling procedures and communicating staff obligations under the Privacy Act.

• Was the respondent in compliance with its obligations to identify and provide all relevant information in response to an access request?
• Whether the respondent's provision of an abbreviated report was a misrepresentation of the information.

An individual complained that a property management company was over-collecting personal information, including Social Insurance Number (SIN), driver's licence information, and banking information, on its rental application forms. The Office of the Privacy Commissioner of Canada (OPC) also investigated the company's lack of a privacy policy. The company committed to making it clear that the request for SIN, driver's licence, and banking information was optional and to posting a privacy policy on its website. The complainant was satisfied with these changes.

• Collection of SIN, driver's licence, and banking information on rental applications
• Requirement for a privacy policy on the company website
• Responsibility for third-party practices