Canadian privacy & access decisions

An individual complained that her telecommunications provider disclosed her personal information without consent. A technical support representative, while attempting to fix her email service, inadvertently configured her email application to automatically forward her emails, including one containing a temporary password, to an acquaintance. The OPC found that this constituted a disclosure of personal information without consent, contravening Principle 4.3. The telecom provider initially provided inaccurate information to the OPC regarding corrective measures taken, but later clarified its existing measures. The complaint was found to be well-founded and resolved, as the provider had some measures in place to prevent recurrence, despite the initial misrepresentations.

• Whether the telecommunications provider disclosed the individual's personal information without consent
• Whether the disclosure contravened Principle 4.3 of PIPEDA
• Whether the telecommunications provider provided accurate information to the OPC during the investigation