Sources / Press and newsletters

PIPEDA Schedule 1, clause 4.2.4: a purpose not previously identified needs the individual's consent

7 records were read from this source, dated 18 Oct 2026.

Its permanent copy is being made in the Wayback Machine.

Last checked 18 Oct 2026

What was read from it

Records read from this source
Record	Kind	As stated	Dated
For customers or staff in Canada, has each person consented to this new use, or will the data be anonymised to the Canadian standard before it leaves? For Quebec, is the privacy impact assessment done and the written agreement ready?	Rights question	The data is anonymised to the regulator's standard (no serious possibility of…	18 Oct 2026
PIPEDA Schedule 1, clause 4.2.4: a purpose not previously identified needs the individual's consent (Personal Information Protection and Electronic Documents Act, S.C. 2000, c. 5, Schedule 1, cl. 4.2.4)	Law or ruling	Licensing support tickets, email, chat or call recordings to a US AI company is a…	18 Oct 2026
PIPEDA Schedule 1, clause 4.5: no use or disclosure for other purposes without consent (Personal Information Protection and Electronic Documents Act, S.C. 2000, c. 5, Schedule 1, cl. 4.5)	Law or ruling	Handing records to a buyer so it can train its own model is a disclosure for a purpose…	18 Oct 2026
PIPEDA section 5(3): only purposes a reasonable person would consider appropriate (Personal Information Protection and Electronic Documents Act, S.C. 2000, c. 5, s. 5(3))	Law or ruling	Even with consent, the purpose itself has to pass this test. A holder should be able to…	18 Oct 2026
PIPEDA section 7.2(4): the business transaction exception excludes the sale or lease of personal information itself (Personal Information Protection and Electronic Documents Act, S.C. 2000, c. 5, s. 7.2(4))	Law or ruling	The exception that lets companies share personal information without consent in a merger…	18 Oct 2026
PIPEDA section 7(3)(f): disclosure without consent for statistical or scholarly research (Personal Information Protection and Electronic Documents Act, S.C. 2000, c. 5, s. 7(3)(f))	Law or ruling	The research exception needs all three conditions, including telling the Commissioner…	18 Oct 2026
PIPEDA sections 2 and 4(1): commercial activity, and staff data only for federal works (Personal Information Protection and Electronic Documents Act, S.C. 2000, c. 5, s. 2 (commercial activity), s. 4(1))	Law or ruling	A paid licence of records is a commercial activity, so PIPEDA reaches the disclosure.…	18 Oct 2026

For customers or staff in Canada, has each person consented to this new use, or will the data be anonymised to the Canadian standard before it leaves? For Quebec, is the privacy impact assessment done and the written agreement ready?
Kind
Rights question
As stated
The data is anonymised to the regulator's standard (no serious possibility of…
Dated
18 Oct 2026
PIPEDA Schedule 1, clause 4.2.4: a purpose not previously identified needs the individual's consent (Personal Information Protection and Electronic Documents Act, S.C. 2000, c. 5, Schedule 1, cl. 4.2.4)
Kind
Law or ruling
As stated
Licensing support tickets, email, chat or call recordings to a US AI company is a…
Dated
18 Oct 2026
PIPEDA Schedule 1, clause 4.5: no use or disclosure for other purposes without consent (Personal Information Protection and Electronic Documents Act, S.C. 2000, c. 5, Schedule 1, cl. 4.5)
Kind
Law or ruling
As stated
Handing records to a buyer so it can train its own model is a disclosure for a purpose…
Dated
18 Oct 2026
PIPEDA section 5(3): only purposes a reasonable person would consider appropriate (Personal Information Protection and Electronic Documents Act, S.C. 2000, c. 5, s. 5(3))
Kind
Law or ruling
As stated
Even with consent, the purpose itself has to pass this test. A holder should be able to…
Dated
18 Oct 2026
PIPEDA section 7.2(4): the business transaction exception excludes the sale or lease of personal information itself (Personal Information Protection and Electronic Documents Act, S.C. 2000, c. 5, s. 7.2(4))
Kind
Law or ruling
As stated
The exception that lets companies share personal information without consent in a merger…
Dated
18 Oct 2026
PIPEDA section 7(3)(f): disclosure without consent for statistical or scholarly research (Personal Information Protection and Electronic Documents Act, S.C. 2000, c. 5, s. 7(3)(f))
Kind
Law or ruling
As stated
The research exception needs all three conditions, including telling the Commissioner…
Dated
18 Oct 2026
PIPEDA sections 2 and 4(1): commercial activity, and staff data only for federal works (Personal Information Protection and Electronic Documents Act, S.C. 2000, c. 5, s. 2 (commercial activity), s. 4(1))
Kind
Law or ruling
As stated
A paid licence of records is a commercial activity, so PIPEDA reaches the disclosure.…
Dated
18 Oct 2026