The catalogue

Canadian privacy & access decisions

The comprehensive archive of federal, provincial, and territorial commissioner decisions — each with a plain-language summary.

1,002 decisions matching
OntarioMunicipal Freedom of Information and Protection of Privacy Act
Ontario flag

Order MO-3187

Subscribe to open Ontario decisions.

Unlock this jurisdiction
OntarioFreedom of Information and Protection of Privacy Act
Ontario flag

Order PO-3485

Subscribe to open Ontario decisions.

Unlock this jurisdiction
QuebecAct respecting access to documents held by public bodies and the protection of personal information
Quebec flag

2015 QCCAI 96 — Commission scolaire Lester B. Pearson

Subscribe to open Quebec decisions.

Unlock this jurisdiction
OntarioFreedom of Information and Protection of Privacy Act
Ontario flag

Order PO-3482

Subscribe to open Ontario decisions.

Unlock this jurisdiction
QuebecAct respecting access to documents held by public bodies and the protection of personal information
Quebec flag

2015 QCCAI 94 — Ministère des Transports du Québec

Subscribe to open Quebec decisions.

Unlock this jurisdiction
QuebecAct respecting the protection of personal information in the private sector
Quebec flag

2015 QCCAI 98 — Centre Eaton and Complexe Les Ailes (Ivanhoé Cambridge)

Subscribe to open Quebec decisions.

Unlock this jurisdiction
OntarioMunicipal Freedom of Information and Protection of Privacy Act
Ontario flag

Order MO-3185

Subscribe to open Ontario decisions.

Unlock this jurisdiction
OntarioMunicipal Freedom of Information and Protection of Privacy Act
Ontario flag

Order MO-3186

Subscribe to open Ontario decisions.

Unlock this jurisdiction
Federal (Canada)Personal Information Protection and Electronic Documents ActNot well-founded
Federal (Canada) flag
Apr 23, 2015PIPEDA Report of Findings #2015-006Indexed Jun 30, 2026

PIPEDA Report of Findings #2015-006: Financial institution takes strong remedial measures after insufficient safeguards and unnecessary storage leaves sensitive data vulnerable to breach

An investment brokerage

An individual complained that an investment brokerage required excessive personal information, including net worth, marital status, and spouse's occupation, to open a self-directed investment account. The complainant argued this was unnecessary given the self-directed nature of the account and that the collection was a condition of service. The brokerage contended that the information was required to comply with regulatory obligations from the Investment Industry Regulatory Organization of Canada (IIROC), the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA), and provincial securities legislation. The OPC found that the purposes for collection were properly identified and appropriate, and that the information was necessary to meet the brokerage's legal and regulatory obligations. Therefore, the OPC concluded that the complaint was not well-founded.

Quick view

Personal Information Protection and Electronic Documents ActNot well-founded

PIPEDA Report of Findings #2015-006: Financial institution takes strong remedial measures after insufficient safeguards and unnecessary storage leaves sensitive data vulnerable to breach

Apr 23, 2015PIPEDA Report of Findings #2015-006
Adjudicator: Daniel Therrien
Plain-Language Summary

An individual complained that an investment brokerage required excessive personal information, including net worth, marital status, and spouse's occupation, to open a self-directed investment account. The complainant argued this was unnecessary given the self-directed nature of the account and that the collection was a condition of service. The brokerage contended that the information was required to comply with regulatory obligations from the Investment Industry Regulatory Organization of Canada (IIROC), the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA), and provincial securities legislation. The OPC found that the purposes for collection were properly identified and appropriate, and that the information was necessary to meet the brokerage's legal and regulatory obligations. Therefore, the OPC concluded that the complaint was not well-founded.

Key Issues
  • Whether the collection of net worth, marital status, and spouse's occupation was necessary for opening a self-directed investment account under Principle 4.4 PIPEDA
  • Whether the purposes for collecting the personal information were explicitly specified under Principle 4.2 PIPEDA
  • Whether the purposes for collecting the personal information were legitimate and appropriate under subsection 5(3) PIPEDA
  • Whether the organization required consent to the collection of information beyond that required for explicitly specified and legitimate purposes as a condition of service under Principle 4.3.3 PIPEDA
Nova ScotiaFreedom of Information and Protection of Privacy Act
Nova Scotia flag

2015 NSCA 38 — Nova Scotia Public Prosecution Service

Subscribe to open Nova Scotia decisions.

Unlock this jurisdiction
SaskatchewanFreedom of Information and Protection of Privacy Act
Saskatchewan flag

Review Report 047-2015 — Ministry of Environment

Subscribe to open Saskatchewan decisions.

Unlock this jurisdiction
Prince Edward IslandFreedom of Information and Protection of Privacy Act
Prince Edward Island flag

RI-15-004 — Department of Agriculture and Forestry

Subscribe to open Prince Edward Island decisions.

Unlock this jurisdiction
AlbertaFreedom of Information and Protection of Privacy Act
Alberta flag

F2015-10 — Alberta Health Services

Subscribe to open Alberta decisions.

Unlock this jurisdiction
OntarioFreedom of Information and Protection of Privacy Act
Ontario flag

Order PO-3481

Subscribe to open Ontario decisions.

Unlock this jurisdiction
SaskatchewanFreedom of Information and Protection of Privacy Act
Saskatchewan flag

Review Report 114-2014 — Ministry of Health

Subscribe to open Saskatchewan decisions.

Unlock this jurisdiction