Canadian Privacy Decisions

Employees complained that a list containing their names, identification and seniority numbers, and social insurance numbers (SINs) was shared with their union without their knowledge or consent. The company admitted fault, stating the SIN was inadvertently included on one list and was visible on another shared with the union. The company implemented changes, including no longer requiring SINs for severance applications and amending consent forms for sharing employee information with the union.

• Disclosure of personal information to a third party (union)
• Inclusion of SIN on employee lists
• Lack of employee consent for disclosure

An individual complained that a bank inappropriately required him to consent to a credit check when applying online for a no-fee personal deposit account. He was also concerned about other information requested, including his Social Insurance Number. The bank agreed to modify its online application forms to clarify consent requirements for credit checks and to make the SIN optional. The length of employment will only be required for applicants seeking credit.

• Consent to credit check for deposit account
• Collection of Social Insurance Number (SIN)
• Clarity of information exchange with credit bureaus

An individual complained that a pharmacy required them to sign a consent form authorizing overly broad disclosure practices before providing medication. The complainant was concerned about information being disclosed for marketing purposes and their ability to obtain necessary medication if consent was refused. The OPC clarified with the pharmacy chain that they did not disclose customer information for secondary marketing. The company revised its consent form and implemented a policy allowing verbal consent for privacy practices.

• Consent to disclosure of personal information
• Disclosure of personal information for marketing purposes
• Impact of consent requirements on access to essential services