BreachOfPrivacy

Canadian Privacy Decisions

The comprehensive archive of Canadian privacy decisions from federal, provincial, and territorial commissioners — with AI-summarized plain-language summaries for every decision.

1,039 decisions matching
Flag of British Columbia
British Columbia
Subscribers only
Personal Information Protection Act

Order News release

Subscribe to access British Columbia decisions.

Flag of Ontario
Ontario
Subscribers only
Freedom of Information and Protection of Privacy Act

Order PO-4010

Subscribe to access Ontario decisions.

Federal (Canada)Personal Information Protection and Electronic Documents ActWell-founded & conditionally resolved
Nov 26, 2019PIPEDA Findings #2019-004· Indexed Apr 12, 2026

PIPEDA Findings #2019-004: Joint investigation of AggregateIQ Data Services Ltd. by the Privacy Commissioner of Canada and the Information and Privacy Commissioner for British Columbia

AggregateIQ Data Services Ltd. (AIQ)

This joint investigation by the Office of the Privacy Commissioner of Canada and the Information and Privacy Commissioner for British Columbia found that AggregateIQ Data Services Ltd. (AIQ) contravened Canadian privacy laws (PIPEDA and PIPA) in its handling of personal information for political campaigns. AIQ failed to ensure adequate consent for the collection, use, and disclosure of personal information, particularly when sharing data with platforms like Facebook for targeted advertising and analytics. Additionally, AIQ's inadequate security measures led to a data breach involving the personal information of millions of individuals.

Quick View

Personal Information Protection and Electronic Documents ActWell-founded & conditionally resolved

PIPEDA Findings #2019-004: Joint investigation of AggregateIQ Data Services Ltd. by the Privacy Commissioner of Canada and the Information and Privacy Commissioner for British Columbia

Nov 26, 2019PIPEDA Findings #2019-004
Adjudicator: Daniel Therrien
Plain-Language Summary

This joint investigation by the Office of the Privacy Commissioner of Canada and the Information and Privacy Commissioner for British Columbia found that AggregateIQ Data Services Ltd. (AIQ) contravened Canadian privacy laws (PIPEDA and PIPA) in its handling of personal information for political campaigns. AIQ failed to ensure adequate consent for the collection, use, and disclosure of personal information, particularly when sharing data with platforms like Facebook for targeted advertising and analytics. Additionally, AIQ's inadequate security measures led to a data breach involving the personal information of millions of individuals.

Key Issues
  • AIQ's collection, use, and disclosure of personal information for political campaigns.
  • AIQ's compliance with consent requirements for personal information.
  • AIQ's implementation of reasonable security measures to protect personal information.
  • Cross-jurisdictional data handling and privacy obligations.
Quebec
Subscribers only
Act respecting access to documents held by public bodies and the protection of personal information

2019 QCCAI 451 — Revenu Québec

Subscribe to access Quebec decisions.

Flag of Ontario
Ontario
Subscribers only
Freedom of Information and Protection of Privacy Act

Order PO-4009

Subscribe to access Ontario decisions.

Flag of Ontario
Ontario
Subscribers only
Freedom of Information and Protection of Privacy Act

Order PO-4008-I

Subscribe to access Ontario decisions.

Flag of Ontario
Ontario
Subscribers only
Municipal Freedom of Information and Protection of Privacy Act

Order MO-3865-I

Subscribe to access Ontario decisions.

Quebec
Subscribers only
Act respecting access to documents held by public bodies and the protection of personal information

2019 QCCAI 407 — Office of the Syndic of the Order of Social Workers and Marriage and Family Therapists of Quebec

Subscribe to access Quebec decisions.

Quebec
Subscribers only
Act respecting the protection of personal information in the private sector

2019 QCCAI 447 — Résidence Fleurie JD inc.

Subscribe to access Quebec decisions.

Flag of Saskatchewan
Saskatchewan
Subscribers only
Freedom of Information and Protection of Privacy Act

Decision 343-2019, 352-2019 — Saskatchewan Workers' Compensation Board

Subscribe to access Saskatchewan decisions.

Flag of Ontario
Ontario
Subscribers only
Freedom of Information and Protection of Privacy Act

Privacy Report PC18-18

Subscribe to access Ontario decisions.

Flag of Ontario
Ontario
Subscribers only
Freedom of Information and Protection of Privacy Act

Privacy Report PC18-18 - 2019-11-22

Subscribe to access Ontario decisions.

Flag of Prince Edward Island
Prince Edward Island
Subscribers only
Freedom of Information and Protection of Privacy Act

FI-19-015 — Department of Economic Growth, Tourism and Culture

Subscribe to access Prince Edward Island decisions.

Flag of Ontario
Ontario
Subscribers only
Municipal Freedom of Information and Protection of Privacy Act

Order MO-3864

Subscribe to access Ontario decisions.

Quebec
Subscribers only
Act respecting access to documents held by public bodies and the protection of personal information

2019 QCCAI 395 — Municipalité Canton de Stanstead

Subscribe to access Quebec decisions.