Condita Research

Canadian Privacy Decisions

The comprehensive archive of Canadian privacy decisions from federal, provincial, and territorial commissioners — with AI-summarized plain-language summaries for every decision.

1,012 decisions matching
Quebec
Subscribers only
Act respecting access to documents held by public bodies and the protection of personal information

2018 QCCAI 131 — École nationale de police du Québec

Subscribe to access Quebec decisions.

Quebec
Subscribers only
Act respecting access to documents held by public bodies and the protection of personal information

2018 QCCAI 136 — Ministère de la Sécurité publique (Sûreté du Québec)

Subscribe to access Quebec decisions.

Quebec
Subscribers only
Act respecting the protection of personal information in the private sector

2018 QCCAI 140 — Bell (Office of the Ombudsman)

Subscribe to access Quebec decisions.

Quebec
Subscribers only
Act respecting access to documents held by public bodies and the protection of personal information

2018 QCCAI 141 — Université Laval

Subscribe to access Quebec decisions.

Quebec
Subscribers only
Act respecting access to documents held by public bodies and the protection of personal information

2018 QCCAI 142 — Sherbrooke (Ville)

Subscribe to access Quebec decisions.

Flag of Ontario
Ontario
Subscribers only
Municipal Freedom of Information and Protection of Privacy Act

Order MO-3612

Subscribe to access Ontario decisions.

Flag of Ontario
Ontario
Subscribers only
Freedom of Information and Protection of Privacy Act

Order PO-3847-F

Subscribe to access Ontario decisions.

Flag of Ontario
Ontario
Subscribers only
Municipal Freedom of Information and Protection of Privacy Act

Order MO-3611

Subscribe to access Ontario decisions.

Quebec
Subscribers only
Act respecting access to documents held by public bodies and the protection of personal information

2018 QCCAI 132 — Investissement Québec and Forêts, Faune et Parcs and Économie, Science et innovation and Énergie et Ressources naturelles

Subscribe to access Quebec decisions.

Quebec
Subscribers only
Act respecting access to documents held by public bodies and the protection of personal information

2018 QCCAI 143 — Ministère de la Sécurité publique (Sûreté du Québec)

Subscribe to access Quebec decisions.

Flag of Alberta
Alberta
Subscribers only
Freedom of Information and Protection of Privacy Act

F2018-22 — Alberta Justice and Solicitor General

Subscribe to access Alberta decisions.

Flag of Ontario
Ontario
Subscribers only
Municipal Freedom of Information and Protection of Privacy Act

Order MO-3608

Subscribe to access Ontario decisions.

Flag of Ontario
Ontario
Subscribers only
Municipal Freedom of Information and Protection of Privacy Act

Order MO-3609

Subscribe to access Ontario decisions.

Flag of Ontario
Ontario
Subscribers only
Municipal Freedom of Information and Protection of Privacy Act

Order MO-3610-I

Subscribe to access Ontario decisions.

Federal (Canada)Personal Information Protection and Electronic Documents ActWell-founded & conditionally resolved
May 24, 2018PIPEDA Report of Findings #2018-003· Indexed Apr 12, 2026

PIPEDA Report of Findings #2018-003: Facebook agrees to stop using non-users’ personal information in users’ address books

Facebook Inc.

The Office of the Privacy Commissioner of Canada investigated a complaint against Facebook Inc. regarding a privacy breach where personal information of users and non-users was inadvertently disclosed through the 'Download Your Information' tool. The investigation found that while Facebook had safeguards in place, they were not adequate prior to the breach, leading to the unauthorized disclosure of contact information. Additionally, Facebook was not sufficiently open about its practice of matching contact information across address books. Facebook has since implemented corrective measures, including a new Privacy Framework and revised notices, resolving the issues.

Quick View

Personal Information Protection and Electronic Documents ActWell-founded & conditionally resolved

PIPEDA Report of Findings #2018-003: Facebook agrees to stop using non-users’ personal information in users’ address books

May 24, 2018PIPEDA Report of Findings #2018-003
Adjudicator: Daniel Therrien
Plain-Language Summary

The Office of the Privacy Commissioner of Canada investigated a complaint against Facebook Inc. regarding a privacy breach where personal information of users and non-users was inadvertently disclosed through the 'Download Your Information' tool. The investigation found that while Facebook had safeguards in place, they were not adequate prior to the breach, leading to the unauthorized disclosure of contact information. Additionally, Facebook was not sufficiently open about its practice of matching contact information across address books. Facebook has since implemented corrective measures, including a new Privacy Framework and revised notices, resolving the issues.

Key Issues
  • Adequacy of safeguards for personal information.
  • Facebook's practice of matching contact information across address books and consent requirements.
  • Openness and transparency of Facebook's policies and practices regarding contact information.
  • Facebook's provision of access to and correction of personal information.