Condita Research

Canadian Privacy Decisions

The comprehensive archive of Canadian privacy decisions from federal, provincial, and territorial commissioners — with AI-summarized plain-language summaries for every decision.

1,091 decisions matching
Flag of Alberta
Alberta
Subscribers only
Freedom of Information and Protection of Privacy Act

F2019-15 — Workers' Compensation Board

Subscribe to access Alberta decisions.

Federal (Canada)Personal Information Protection and Electronic Documents ActWell-founded & conditionally resolved
Apr 9, 2019PIPEDA Findings #2019-001· Indexed Apr 12, 2026

PIPEDA Findings #2019-001: Investigation into Equifax Inc. and Equifax Canada Co.’s compliance with PIPEDA in light of the 2017 breach of personal information

Equifax Inc. and Equifax Canada Co.

The Office of the Privacy Commissioner of Canada (OPC) investigated Equifax Inc. and Equifax Canada Co. following a 2017 data breach that compromised the personal information of approximately 19,000 Canadians. The OPC found that both Equifax Inc. and Equifax Canada contravened PIPEDA concerning inadequate safeguards, data retention, accountability, and consent for the disclosure of personal information. The investigation also found Equifax Canada's post-breach safeguards to be inadequate for protecting affected Canadians. Equifax Canada has committed to corrective measures, and the matters are conditionally resolved.

Quick View

Personal Information Protection and Electronic Documents ActWell-founded & conditionally resolved

PIPEDA Findings #2019-001: Investigation into Equifax Inc. and Equifax Canada Co.’s compliance with PIPEDA in light of the 2017 breach of personal information

Apr 9, 2019PIPEDA Findings #2019-001
Adjudicator: Daniel Therrien
Plain-Language Summary

The Office of the Privacy Commissioner of Canada (OPC) investigated Equifax Inc. and Equifax Canada Co. following a 2017 data breach that compromised the personal information of approximately 19,000 Canadians. The OPC found that both Equifax Inc. and Equifax Canada contravened PIPEDA concerning inadequate safeguards, data retention, accountability, and consent for the disclosure of personal information. The investigation also found Equifax Canada's post-breach safeguards to be inadequate for protecting affected Canadians. Equifax Canada has committed to corrective measures, and the matters are conditionally resolved.

Key Issues
  • Adequacy of security safeguards for Canadian personal information held by Equifax Inc.
  • Equifax Inc.'s data retention and destruction practices for Canadian personal information.
  • Equifax Canada's accountability for Canadian personal information handled by Equifax Inc.
  • Adequacy of consent obtained for the collection and disclosure of Canadian personal information to Equifax Inc.
  • Adequacy of safeguards and post-breach measures for Canadian personal information held by Equifax Canada.
Quebec
Subscribers only
Act respecting access to documents held by public bodies and the protection of personal information

2019 QCCAI 127 — St-Séverin (Municipality)

Subscribe to access Quebec decisions.

Quebec
Subscribers only
Act respecting access to documents held by public bodies and the protection of personal information

2019 QCCAI 113 — Service de police de la Ville de Gatineau

Subscribe to access Quebec decisions.

Flag of Nova Scotia
Nova Scotia
Subscribers only
Freedom of Information and Protection of Privacy Act

Houston v. Nova Scotia (Department of Transportation and Infrastructure Renewal)

Subscribe to access Nova Scotia decisions.

Flag of Saskatchewan
Saskatchewan
Subscribers only
Health Information Protection Act

Review Report 027-2018 — Dr. Mary Vandergoot

Subscribe to access Saskatchewan decisions.

Flag of Saskatchewan
Saskatchewan
Subscribers only
Local Authority Freedom of Information and Protection of Privacy Act

Investigation Report 298-2018 — Rural Municipality of Blaine Lake #434

Subscribe to access Saskatchewan decisions.

Flag of British Columbia
British Columbia
Subscribers only
Freedom of Information and Protection of Privacy Act

BC OIPC order 2178

Subscribe to access British Columbia decisions.

Flag of Ontario
Ontario
Subscribers only
Municipal Freedom of Information and Protection of Privacy Act

Order MO-3749-I

Subscribe to access Ontario decisions.

Quebec
Subscribers only
Act respecting access to documents held by public bodies and the protection of personal information

2019 QCCAI 143 — Mercier (City)

Subscribe to access Quebec decisions.

Quebec
Subscribers only
Act respecting access to documents held by public bodies and the protection of personal information

2019 QCCAI 153 — Commission des droits de la personne et des droits de la jeunesse (CDPDJ)

Subscribe to access Quebec decisions.

Quebec
Subscribers only
Act respecting access to documents held by public bodies and the protection of personal information

2019 QCCAI 155 — Université de Sherbrooke

Subscribe to access Quebec decisions.

Quebec
Subscribers only
Act respecting access to documents held by public bodies and the protection of personal information

2019 QCCAI 156 — Gatineau (Service de police)

Subscribe to access Quebec decisions.

Quebec
Subscribers only
Act respecting access to documents held by public bodies and the protection of personal information

2019 QCCAI 157 — CIUSSS du Nord-de-L'Île-de-Montréal

Subscribe to access Quebec decisions.

Quebec
Subscribers only
Act respecting access to documents held by public bodies and the protection of personal information

2019 QCCAI 158 — Ministère de la Sécurité publique (Sûreté du Québec)

Subscribe to access Quebec decisions.