Search

Garante Privacy Fines Acea Energia €2 Million for Unauthorized Contracts

The Italian Garante privacy has fined Acea Energia spa €2 million for significant violations of personal data protection laws. The company was found to have used inaccurate customer data to activate over 1,200 unsolicited energy contracts through door-to-door agents.

Privacy Commissioner of Canada ArriveCAN App Investigation Report

The Privacy Commissioner of Canada has tabled a special report on the ArriveCAN app investigation. While no contraventions of the Privacy Act were found, the report outlines steps the Canada Border Services Agency must take to strengthen privacy and security in its contracting framework.

Global Data Protection Authorities Statement on AI Imagery Privacy

Sixty global data protection and privacy authorities have issued a joint statement outlining privacy principles for AI-generated imagery. The statement calls on organizations developing and using AI content generation systems to implement safeguards and protect individuals, particularly children, from potential harm.

Privacy Commissioner concludes Loblaw loyalty program investigation

The Privacy Commissioner of Canada has concluded an investigation into Loblaw's PC Optimum Loyalty Program. The investigation found that Loblaw failed to respond to deletion requests in a timely manner and retained purchase history after account deletion, violating privacy regulations. Loblaw has agreed to implement recommendations to improve its processes.

Privacy Commissioner of Canada Testimony on Bill C-12

The Privacy Commissioner of Canada, Philippe Dufresne, testified before the Senate Committee on Bill C-12, the Strengthening Canada's Immigration System and Borders Act. He highlighted language in the bill related to information-sharing agreements as a positive example of recommended approaches for extensive personal information disclosures.

Privacy Commissioner Recommends Bill C-4 Amendments for Political Party Privacy

The Privacy Commissioner of Canada recommended amendments to Bill C-4 to introduce privacy rules for political parties. The Commissioner suggested that these rules should parallel existing public and private sector requirements under federal law, adapted for the democratic context.

Staples Canada ULC Investigated for Privacy Practices on Resold Devices

The Office of the Privacy Commissioner of Canada investigated Staples Canada ULC regarding its Openbox program for resold electronic devices. The investigation found deficiencies in data wiping procedures and employee training, leading to recommendations for Staples to improve its practices within nine months.

Loblaw PC Optimum Data Retention Investigated Under PIPEDA

The Office of the Privacy Commissioner of Canada has concluded an investigation into Loblaw Companies Ltd.'s retention of PC Optimum loyalty program member data. The findings highlight the importance of ensuring anonymized data cannot be re-identified and that personal information is destroyed or anonymized when no longer necessary.

PIPEDA Investigation into Google Search Compliance

The Office of the Privacy Commissioner of Canada (OPC) has concluded its investigation into Google's search engine compliance with PIPEDA. The investigation found that Google's accuracy obligations do not extend to the underlying content of linked articles, but it must ensure personal information in search results is accurate.

Joint Investigation of TikTok by Canadian Privacy Commissioners

Canadian privacy commissioners have concluded a joint investigation into TikTok's collection, use, and disclosure of personal information, particularly concerning children. The findings address appropriate purposes for data handling and the validity of user consent for ad targeting and content personalization.