Office of the Privacy Commissioner of Canada

An investigation by the Privacy Commissioner of Canada has found that Grok’s AI image-generation tool was launched without proper safeguards or sufficient consideration of potential privacy harms. This lack of protections allowed users around the globe to create and share non-consensual, sexualized deepfakes, many targeting women and children. In a report released on June 11, Commissioner Philippe … Read more

Office of the Privacy Commissioner of Canada

An investigation by the Privacy Commissioner of Canada has concluded that, while the Canada Revenue Agency (CRA) has taken measures since 2024 to improve its security posture, more can be done to protect taxpayer information from being exploited by bad actors. In a Special Report tabled in Parliament, the Privacy Commissioner highlights that there have … Read more

Privacy Commissioner of Canada

In the wake of a joint investigation by the Privacy Commissioner of Canada and his provincial counterparts in Quebec, British Columbia, and Alberta that identified several concerns related to how OpenAI initially developed and deployed ChatGPT, the company has taken steps that better protect the personal information of Canadians. The joint investigation examined OpenAI’s collection, use, … Read more

Office of the Privacy Commissioner of Canada

Privacy Commissioner of Canada Philippe Dufresne marked the start of Privacy Awareness Week 2026 with the launch of his Office’s new guidance on age assurance following an extensive public consultation. During his keynote address to professionals in the fields of privacy, artificial intelligence governance, and cybersecurity at the IAPP Canada Symposium in Toronto, Ont., Dufresne said that the … Read more

Office of the Privacy Commissioner of Canada

Nova Scotia Power has committed to take steps to strengthen its security measures following a cyberattack that impacted more than 900,000 current and former customers. Through a compliance letter that includes specific commitments, the company has agreed to implement measures to ensure stronger privacy protections for Nova Scotia Power customers going forward. Privacy Commissioner of … Read more

Office of the Privacy Commissioner of Canada

The World Anti-Doping Agency (WADA) has committed to implementing measures to help ensure that international sport federations and other anti-doping organizations do not use highly sensitive personal information collected from athletes and that is under WADA’s control for purposes other than those related to anti-doping. The commitments come following the launch of an investigation by Privacy … Read more

Privacy Commissioner of Canada

A Special Report on the Privacy Commissioner of Canada’s investigation into the ArriveCAN application was tabled in Parliament. The investigation was launched following a complaint against the Canada Border Services Agency (CBSA) related to contracting practices during the development of the ArriveCAN app. The app was launched during the COVID-19 pandemic to digitize the collection … Read more

Office of the Privacy Commissioner of Canada

Privacy Commissioner of Canada Philippe Dufresne has issued the findings in an investigation into complaints against Loblaw Companies Ltd. related to the PC Optimum Loyalty Program. The investigation found that, while Loblaw had mechanisms in place for customers to request an account deletion or to raise privacy concerns, it took an unreasonable amount of time to address the … Read more

Office of the Privacy Commissioner of Canada

Privacy Commissioner of Canada Philippe Dufresne is expanding his current investigation into X Corp., which operates the popular social media platform X, following reports that the chatbot, Grok, is being used to create explicit images of individuals without their consent. The Privacy Commissioner has also launched a related investigation into xAI, the artificial intelligence (AI) company … Read more

Office of the Privacy Commissioner of Canada

An investigation by the Privacy Commissioner of Canada into Staples Canada has found that the company did not fully remove users’ personal information from returned laptops that it later resold. Staples has confirmed that it is now updating its policies and that it will implement the Privacy Commissioner’s recommendations. Privacy Commissioner of Canada Philippe Dufresne stated “This investigation … Read more