Canadian Privacy Decisions

An individual complained that her condominium corporation disclosed information about a dispute she was involved in to all condominium owners. The corporation initially believed the disclosed information was only publicly available contact details. The OPC clarified that the information about the dispute itself was personal information that had been disclosed without consent. The corporation apologized, and the matter was considered settled.

• Definition of personal information
• Disclosure of sensitive personal information without consent
• Disclosure of information about disputes

An individual complained that a business failed to provide him with his personal information and its privacy policy. The business initially refused access to information predating its PIPEDA obligations and did not have a privacy policy. After the OPC intervened, the business provided the remaining information and drafted a privacy policy, which was given to the complainant, settling the matter.

• Access to personal information
• Availability of privacy policy

A student complained about being required to provide his Social Insurance Number (SIN) to rent an apartment. The property management firm initially required the SIN for identity verification, credit checks, and collections. Following the OPC's guidance and federal policy against the SIN becoming a universal identifier, the firm revised its lease agreement to only require a driver's license for identification, making SIN provision optional.

• Necessity of collecting SIN for identity verification and credit checks
• Requirement of SIN as a condition of service for renting an apartment
• Overtly indicating to the customer that SIN provision is optional

The Office of the Privacy Commissioner of Canada (OPC) investigated a complaint from an individual concerned that her credit card receipt contained her name, credit card number, and expiry date. The OPC found that while the restaurant's equipment did not mask this information, it was collected, used, and stored in a manner consistent with privacy principles, and there was no unauthorized disclosure. The matter was settled when the complainant was informed that industry-wide masking of credit card receipts was expected by 2007.

• Collection, use, and storage of credit card information on receipts
• Adequacy of credit card receipt masking technology
• Compliance with privacy principles despite lack of masking