Canadian Privacy Decisions

An employee complained that her pension and benefit provider improperly disclosed her unique identifier, failed to keep her address accurate, and did not implement adequate safeguards. An individual with the same name was mistakenly given the complainant's ID number, leading to her address being changed. Consequently, five mailings containing sensitive information were sent to the wrong address, and the complainant lost her life insurance coverage due to missed forms. The provider corrected the error and reinstated coverage.

• Disclosure of unique identifier to a third party without consent.
• Failure to maintain accurate client address information.
• Inadequate safeguards against unauthorized disclosure and modification of personal information.
• Improper authentication of caller identity.