On October 16, 2019, the Office of the Privacy Commissioner of Canada (OPC) concluded its investigation into Loblaw Co Ltd (Loblaw)’s authentication processes and data transfers related to their gift card program. Loblaw’s gift card program was created in response to the retailer's admitted part in a bread price-fixing scandal.
In order to recover a $25 gift card, Loblaw required consumers to submit personal information including their names and addresses. Certain individuals were contacted and informed that they would not receive the gift card unless they provided additional information such as a utility bill or driver's licence. When questioned why this information was required, Loblaw clarified that this information was required to authenticate and verify name and address information. Loblaw also informed individuals that they could redact personal information which they did not wish to share.
For more information, please see the OPC’s Report of Findings here.
Summary By: Juliette Sakran
Disclaimer: This Newsletter is intended to provide readers with general information on legal developments in the areas of e-commerce, information technology and intellectual property. It is not intended to be a complete statement of the law, nor is it intended to provide legal advice. No person should act or rely upon the information contained in this newsletter without seeking legal advice.
E-TIPS is a registered trade-mark of Deeth Williams Wall LLP.