PogoWasRight.org

Menu
  • About
  • Privacy
Menu

Ca: Telemarketer’s collection and disclosure of personal information deemed to be non-consensual

Posted on December 5, 2009 by pogowasright.org

PIPEDA Case Summary #2008-398

The Office of the Privacy Commissioner of Canada received complaints one year apart from two individuals who claimed that telemarketing agents from a particular bank had collected their personal information for a credit card application without consent. One of the complainants alleged that the bank had disclosed her personal information to a credit bureau without her consent. The other complainant alleged that the bank had also collected her credit report and used her personal information to process the application without her consent.

The Assistant Privacy Commissioner was disturbed by the transcripts of the calls made to the complainants. It was clear to her that neither complainant had clearly understood the substance of the calls and that their consent therefore had not been properly obtained. She concluded that the complaints of both individuals were well-founded.

In the second case, the Assistant Commissioner made a number of recommendations, to which the organization responded satisfactorily. It was therefore concluded that the complaints in this case were also resolved.

Read more on the investigation and findings from the Office of the Privacy Commissioner of Canada.

Category: BusinessNon-U.S.

Post navigation

← Ca: Bank not responsible after new account was opened using stolen identity
Yahoo! gets no comfort from Cryptome (and the band plays on) →

Now more than ever

Search

Contact Me

Email: [email protected]

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

Categories

Recent Posts

  • Your household smart products must respect your privacy – including your air fryer
  • Vermont signs Kids Code into law, faces legal challenges
  • Data Categories and Surveillance Pricing: Ferguson’s Nuanced Approach to Privacy Innovation
  • Anne Wojcicki Wins Bidding for 23andMe
  • Would you — or wouldn’t you?
  • New York passes a bill to prevent AI-fueled disasters
  • Synthetic Data and the Illusion of Privacy: Legal Risks of Using De-Identified AI Training Sets

RSS Recent Posts on DataBreaches.net

  • Major trial underway for data leak that left 72,000 victims in France
  • Anubis: A Closer Look at an Emerging Ransomware with Built-in Wiper
  • HealthEC Agrees to $5.48 Million Settlement to End Data Breach Lawsuit
  • US offering $10 million for info on Iranian hackers behind IOControl malware
  • Sompo Japan Insurance submits improvement plan after info leakage
©2025 PogoWasRight.org. All rights reserved.