BreachOfPrivacy

Canadian Privacy Decisions

The comprehensive archive of Canadian privacy decisions from federal, provincial, and territorial commissioners — with AI-summarized plain-language summaries for every decision.

1 decision matching
Federal (Canada)Personal Information Protection and Electronic Documents ActWell-founded
Jun 30, 2011Commissioner’s Findings - PIPEDA Report of Findings #2011-011· Indexed Apr 12, 2026

Commissioner’s Findings - PIPEDA Report of Findings #2011-011: Public opinion research firm must better inform survey respondents about their personal information use; refrain from collecting full birth dates

A public opinion research firm

A complainant alleged that a market research firm unnecessarily collected her full date of birth and did not adequately inform her that survey responses would be added to her member profile. The Office of the Privacy Commissioner of Canada (OPC) found that collecting the full date of birth was not necessary and recommended collecting only the month and year. The OPC also found that the firm failed to adequately inform participants that their survey responses would be linked to their profiles. While the firm agreed to clarify consent language, it refused to stop collecting or using the day of birth, leading the OPC to find the complaint well-founded but partially unresolved.

Quick View

Personal Information Protection and Electronic Documents ActWell-founded

Commissioner’s Findings - PIPEDA Report of Findings #2011-011: Public opinion research firm must better inform survey respondents about their personal information use; refrain from collecting full birth dates

Jun 30, 2011Commissioner’s Findings - PIPEDA Report of Findings #2011-011
Adjudicator: Jennifer Stoddart
Plain-Language Summary

A complainant alleged that a market research firm unnecessarily collected her full date of birth and did not adequately inform her that survey responses would be added to her member profile. The Office of the Privacy Commissioner of Canada (OPC) found that collecting the full date of birth was not necessary and recommended collecting only the month and year. The OPC also found that the firm failed to adequately inform participants that their survey responses would be linked to their profiles. While the firm agreed to clarify consent language, it refused to stop collecting or using the day of birth, leading the OPC to find the complaint well-founded but partially unresolved.

Key Issues
  • Necessity of collecting full date of birth for market research demographics
  • Necessity of confirming full date of birth in profiling surveys
  • Adequacy of notice and consent regarding the linking of survey responses to member profiles