Federal (Canada)
Ontario
British Columbia
Alberta
Saskatchewan
Manitoba
Quebec
Nova Scotia
New Brunswick
Prince Edward Island
Newfoundland and Labrador
Subscribers only
Freedom of Information and Protection of Privacy Act
F17-20 — BC OIPC order 1937
Subscribe to access British Columbia decisions.
Canadian Privacy Decisions
Canadian Privacy Decisions
The comprehensive archive of Canadian privacy decisions from federal, provincial, and territorial commissioners — with AI-summarized plain-language summaries for every decision.
1,016 decisions matching
Governing law
ATIA (Alberta)FOIP (Alberta)HIA (Alberta)PIPA (Alberta)POPAE-Health ActFIPPA (British Columbia)PIPA (British Columbia)ATIA (Federal (Canada))CASLPIPEDAPrivacy ActFIPPA (Manitoba)PHIA (Manitoba)PHIPAARTIPPAATIPPA, 2015PHIA (Newfoundland and Labrador)FOIPOPMGA Part XXPHIA (Nova Scotia)PIIDPACYFSAFIPPA (Ontario)MFIPPAPHIPAFOIPPHIA (Prince Edward Island)Health Information ActPrivate-Sector ActPublic Bodies ActFOIP (Saskatchewan)HIPALA FOIP
Outcome
OIC Order (ATIA s.36.1, binding)Well-foundedWell-founded & resolvedWell-founded & conditionally resolvedWell-founded & unresolvedNot well-foundedAction warranteds.6.1 Application Granted (refusal authorized)s.6.1 Application Denied (must respond)SettledResolvedEarly-resolvedDiscontinuedWithdrawnDeclined to investigateNo jurisdiction
Decision Type
Subscribers only
Freedom of Information and Protection of Privacy Act
F17-19 — BC OIPC order 1936
Subscribe to access British Columbia decisions.
Subscribers only
Freedom of Information and Protection of Privacy Act
Order PO-3723
Subscribe to access Ontario decisions.
Subscribers only
Municipal Freedom of Information and Protection of Privacy Act
Order MO-3429
Subscribe to access Ontario decisions.
Federal (Canada)Personal Information Protection and Electronic Documents ActResolved
Apr 26, 2017Incident case summary #2017-001· Indexed Apr 12, 2026
Incident case summary #2017-001: Multiple breach incidents as a result of password reuse
Office of the Privacy Commissioner of Canada
This report details three incidents in 2017 where Canadian organizations experienced data breaches due to password reuse by their customers. In each case, attackers used login credentials obtained from unrelated breaches to access customer accounts. The Office of the Privacy Commissioner of Canada found the organizations' responses to be appropriate, including actions like password resets, enhanced security measures, and customer notifications, and encouraged other organizations to adopt similar preventative strategies.
Subscribers only
Access to Information and Protection of Privacy Act, 2015
A-2017-011 — Royal Newfoundland Constabulary
Subscribe to access Newfoundland and Labrador decisions.
Subscribers only
Freedom of Information and Protection of Privacy Act
FI-17-006 — Department of Family and Human Services
Subscribe to access Prince Edward Island decisions.
Subscribers only
Personal Health Information Protection Act
PHIPA DECISION 44
Subscribe to access Ontario decisions.
Subscribers only
Local Authority Freedom of Information and Protection of Privacy Act
Review Report 014-2017 — Town of Kindersley
Subscribe to access Saskatchewan decisions.
Subscribers only
Local Authority Freedom of Information and Protection of Privacy Act
Review Report 011-2017 — Town of Kindersley
Subscribe to access Saskatchewan decisions.
Subscribers only
Local Authority Freedom of Information and Protection of Privacy Act
Review Report 010-2017 — Town of Kindersley
Subscribe to access Saskatchewan decisions.
Subscribers only
Local Authority Freedom of Information and Protection of Privacy Act
Review Report 012-2017 — Town of Kindersley
Subscribe to access Saskatchewan decisions.
Subscribers only
Local Authority Freedom of Information and Protection of Privacy Act
Review Report 013-2017 — Town of Kindersley
Subscribe to access Saskatchewan decisions.
Subscribers only
Freedom of Information and Protection of Privacy Act
F2017-41 — Treasury Board and Finance
Subscribe to access Alberta decisions.
Subscribers only
Municipal Freedom of Information and Protection of Privacy Act
Order MO-3428
Subscribe to access Ontario decisions.