Organizations shall implement policies and practices to give effect to the principles of the Act.

Home Depot retained a history of the purchases made using a particular email address and information about those purchases. 

this OPC decision highlights the following Principles from PIPEDA, and gives detail about expected protections from hackers.

Discover how Home Depot violated customer privacy by sharing data with Facebook, leading to a rebuke from the OPC.

App was tracking customer location even when the App was closed

MGM did not report the 2019 breach to the OPC and did not notify affected Canadian residents

BMO’s online banking software had significant weaknesses which allowed the attackers to orchestrate a large-scale breach

CSR's unwittingly bypassed customer authentication protocols and allowed fraudsters to access customer accounts

a truck driver, alleged that his employer collected audio recordings of all conversations that occurred within the cab of his truck

Yahoo Mail users, stayed signed in by default posed great privacy concerns for users accessing their email on a public or shared computer.

collecting and using banking login credentials

Discover how the OPC's early resolution in the PIPEDA Case 2017-003 highlights the imperative nature of consent.

The Interplay Between Privacy and Litigation

Explore the intricacies of the OPC Decision in litigation-related privacy matters. PIPEDA Case 2013-001