The catalogue

Canadian privacy & access decisions

The comprehensive archive of federal, provincial, and territorial commissioner decisions — each with a plain-language summary.

22,101 decisions in the archive
OntarioMunicipal Freedom of Information and Protection of Privacy Act
Ontario flag

Order MO-3094

Subscribe to open Ontario decisions.

Unlock this jurisdiction
OntarioMunicipal Freedom of Information and Protection of Privacy Act
Ontario flag

Order MO-3093

Subscribe to open Ontario decisions.

Unlock this jurisdiction
OntarioFreedom of Information and Protection of Privacy Act
Ontario flag

Order PO-3390

Subscribe to open Ontario decisions.

Unlock this jurisdiction
SaskatchewanLocal Authority Freedom of Information and Protection of Privacy Act
Saskatchewan flag

INVESTIGATION REPORT LA-2014-001 — Rural Municipality of Parkdale No. 498

Subscribe to open Saskatchewan decisions.

Unlock this jurisdiction
AlbertaPersonal Information Protection Act
Alberta flag

P2014-06 — Crawford & Company (Canada) Inc.

Subscribe to open Alberta decisions.

Unlock this jurisdiction
QuebecAct respecting access to documents held by public bodies and the protection of personal information
Quebec flag

2014 QCCAI 199 — Ministère de la Sécurité publique

Subscribe to open Quebec decisions.

Unlock this jurisdiction
British ColumbiaFreedom of Information and Protection of Privacy Act
British Columbia flag

F14-34 — BC OIPC order 1602

Subscribe to open British Columbia decisions.

Unlock this jurisdiction
British ColumbiaFreedom of Information and Protection of Privacy Act
British Columbia flag

F14-35 — BC OIPC order 1603

Subscribe to open British Columbia decisions.

Unlock this jurisdiction
British ColumbiaFreedom of Information and Protection of Privacy Act
British Columbia flag

F14-36 — BC OIPC order 1604

Subscribe to open British Columbia decisions.

Unlock this jurisdiction
QuebecAct respecting access to documents held by public bodies and the protection of personal information
Quebec flag

2014 QCCAI 196 — Ville de Saguenay

Subscribe to open Quebec decisions.

Unlock this jurisdiction
Federal (Canada)Privacy ActWell-founded
Federal (Canada) flag
Sep 5, 2014Indexed Jun 30, 2026

Violating principle of 'need-to-know' leads to data breach - September 5, 2014

Aboriginal Affairs and Northern Development Canada (AANDC)

An individual complained that Aboriginal Affairs and Northern Development Canada (AANDC) improperly disclosed personal information to La Presse newspaper. The newspaper published an article referencing a document created by AANDC that listed individuals who had made Access to Information Act (ATIA) requests related to former Minister Jim Prentice. AANDC confirmed the document's existence and reported that it had been created to respond to ATIA requests. The OPC found that AANDC improperly disclosed the personal information of those listed in the document, which ultimately reached La Presse. Furthermore, AANDC shared this information with officials who did not have a legitimate need-to-know. The complaint was found to be well-founded.

Quick view

Privacy ActWell-founded

Violating principle of 'need-to-know' leads to data breach - September 5, 2014

Sep 5, 2014
Adjudicator: Daniel Therrien
Plain-Language Summary

An individual complained that Aboriginal Affairs and Northern Development Canada (AANDC) improperly disclosed personal information to La Presse newspaper. The newspaper published an article referencing a document created by AANDC that listed individuals who had made Access to Information Act (ATIA) requests related to former Minister Jim Prentice. AANDC confirmed the document's existence and reported that it had been created to respond to ATIA requests. The OPC found that AANDC improperly disclosed the personal information of those listed in the document, which ultimately reached La Presse. Furthermore, AANDC shared this information with officials who did not have a legitimate need-to-know. The complaint was found to be well-founded.

Key Issues
  • Whether the document contained personal information under s.3 of the Privacy Act
  • Whether all AANDC officials who accessed the document had a need-to-know the identity of the requesters under s.7(a) of the Privacy Act and TBS Policy on Access to Information s.6.2.3
  • Whether the disclosure of the information to La Presse constituted a contravention of s.8 of the Privacy Act
QuebecAct respecting access to documents held by public bodies and the protection of personal information
Quebec flag

2014 QCCAI 193 — Ministère des Transports du Québec

Subscribe to open Quebec decisions.

Unlock this jurisdiction
AlbertaFreedom of Information and Protection of Privacy Act
Alberta flag

F2014-36 — Alberta Health

Subscribe to open Alberta decisions.

Unlock this jurisdiction
British ColumbiaFreedom of Information and Protection of Privacy Act
British Columbia flag

F14-33 — BC OIPC order 1601

Subscribe to open British Columbia decisions.

Unlock this jurisdiction
British ColumbiaFreedom of Information and Protection of Privacy Act
British Columbia flag

F14-32 — BC OIPC order 1600

Subscribe to open British Columbia decisions.

Unlock this jurisdiction