
F18-22 — BC OIPC order 2055
Subscribe to access British Columbia decisions.
The comprehensive archive of Canadian privacy decisions from federal, provincial, and territorial commissioners — with AI-summarized plain-language summaries for every decision.

Subscribe to access British Columbia decisions.

Subscribe to access Ontario decisions.

Subscribe to access Ontario decisions.

Subscribe to access Alberta decisions.

Subscribe to access Ontario decisions.

Subscribe to access Quebec decisions.

Subscribe to access Ontario decisions.

Subscribe to access Ontario decisions.

Subscribe to access Quebec decisions.

Subscribe to access Ontario decisions.

Subscribe to access Quebec decisions.

Subscribe to access Saskatchewan decisions.

Subscribe to access Ontario decisions.
The Office of the Privacy Commissioner of Canada investigated a complaint from a federal inmate who alleged that Correctional Service Canada (CSC) contravened the Privacy Act by denying him access to personal information, specifically video and audio recordings. This was a repeat issue, as similar allegations were found to be well-founded in a previous investigation. While CSC properly exempted some recordings, it failed to respond to some requests entirely and, critically, failed to retrieve and retain requested video recordings before they were overwritten in two instances, despite previous recommendations to improve processes for short-retention period records. The complaint was found well-founded due to these failures to provide timely access.
The Office of the Privacy Commissioner of Canada (OPC) investigated complaints against Profile Technology Ltd. (Profile Technology), a New Zealand-based company, for copying and using personal information from Facebook profiles without consent. The OPC found that Profile Technology's website was not merely a search engine but a social networking site, and that the information was not "publicly available" under PIPEDA. The company's practice of repurposing outdated Facebook data without consent or consideration for privacy settings was deemed inappropriate. Additionally, Profile Technology was found to be retaining help desk ticket information longer than necessary. The OPC concluded that Profile Technology contravened PIPEDA by using and disclosing personal information for purposes not appropriate in the circumstances and without consent.