BreachOfPrivacy

Canadian Privacy Decisions

The comprehensive archive of Canadian privacy decisions from federal, provincial, and territorial commissioners — with AI-summarized plain-language summaries for every decision.

1,474 decisions matching
Flag of Quebec
Quebec
Subscribers only
Act respecting access to documents held by public bodies and the protection of personal information

Décision 1028636-S — Ville de Laval

Subscribe to access Quebec decisions.

Flag of Alberta
Alberta
Subscribers only
Freedom of Information and Protection of Privacy Act

FOIP2025-36 — City of Medicine Hat

Subscribe to access Alberta decisions.

Flag of Alberta
Alberta
Subscribers only
Freedom of Information and Protection of Privacy Act

FOIP2025-37 — City of Medicine Hat

Subscribe to access Alberta decisions.

Flag of Alberta
Alberta
Subscribers only
Freedom of Information and Protection of Privacy Act

FOIP2025-38 — City of Medicine Hat

Subscribe to access Alberta decisions.

Flag of Alberta
Alberta
Subscribers only
Freedom of Information and Protection of Privacy Act

FOIP2025-39 — City of Medicine Hat

Subscribe to access Alberta decisions.

Flag of Alberta
Alberta
Subscribers only
Freedom of Information and Protection of Privacy Act

FOIP2025-40 — City of Medicine Hat

Subscribe to access Alberta decisions.

Flag of Ontario
Ontario
Subscribers only
Municipal Freedom of Information and Protection of Privacy Act

Order MO-4731

Subscribe to access Ontario decisions.

Quebec
Subscribers only
Act respecting the protection of personal information in the private sector

2025 QCCAI 390 — Bell Mobilité inc. and BCE INC.

Subscribe to access Quebec decisions.

Flag of Newfoundland and Labrador
Newfoundland and Labrador
Subscribers only
Access to Information and Protection of Privacy Act, 2015

A-2025-048 — Memorial University

Subscribe to access Newfoundland and Labrador decisions.

Flag of Alberta
Alberta
Subscribers only
Freedom of Information and Protection of Privacy Act

FOIP2025-D-01

Subscribe to access Alberta decisions.

Flag of British Columbia
British Columbia
Subscribers only
Freedom of Information and Protection of Privacy Act

Order Ministry of Attorney General

Subscribe to access British Columbia decisions.

Flag of Ontario
Ontario
Subscribers only
Freedom of Information and Protection of Privacy Act

Order PO-4767

Subscribe to access Ontario decisions.

Federal (Canada)Personal Information Protection and Electronic Documents ActWell-founded & conditionally resolved
Dec 1, 2025PIPEDA Findings #2025-004· Indexed Apr 12, 2026

PIPEDA Findings #2025-004: Investigation into the privacy practices of Staples Canada ULC related to electronic devices to be resold as part of its Openbox program

Staples Canada ULC

This investigation examined Staples Canada's practices concerning the removal of personal information from returned laptops resold through its Openbox program. The Office of the Privacy Commissioner of Canada (OPC) found that Staples had deficiencies in its policies, procedures, and employee training regarding data wiping. Specifically, the OPC determined that Staples did not consistently ensure full data sanitization according to manufacturer guidelines, leading to residual personal information being found on some devices. Staples agreed to implement corrective measures, including updating procedures, enhancing training, and engaging third-party spot checks.

Quick View

Personal Information Protection and Electronic Documents ActWell-founded & conditionally resolved

PIPEDA Findings #2025-004: Investigation into the privacy practices of Staples Canada ULC related to electronic devices to be resold as part of its Openbox program

Dec 1, 2025PIPEDA Findings #2025-004
Adjudicator: Philippe Dufresne
Plain-Language Summary

This investigation examined Staples Canada's practices concerning the removal of personal information from returned laptops resold through its Openbox program. The Office of the Privacy Commissioner of Canada (OPC) found that Staples had deficiencies in its policies, procedures, and employee training regarding data wiping. Specifically, the OPC determined that Staples did not consistently ensure full data sanitization according to manufacturer guidelines, leading to residual personal information being found on some devices. Staples agreed to implement corrective measures, including updating procedures, enhancing training, and engaging third-party spot checks.

Key Issues
  • Adequacy of safeguards for personal information on returned electronic devices
  • Sufficiency of Staples' policies and procedures for data wiping
  • Effectiveness of employee training on data sanitization
  • Compliance with PIPEDA Principles 4.7.1 and 4.7.3
Quebec
Subscribers only
Act respecting access to documents held by public bodies and the protection of personal information

2025 QCCAI 384 — Ministère de la Sécurité publique (Sûreté du Québec)

Subscribe to access Quebec decisions.

Flag of Newfoundland and Labrador
Newfoundland and Labrador
Subscribers only
Access to Information and Protection of Privacy Act, 2015

A-2025-047 — Department of Justice and Public Safety

Subscribe to access Newfoundland and Labrador decisions.