RBC - invalid consent to secondary uses (August 2008)

By way of a formal complaint [1] filed August 1, 2008, CIPPIC challenged the legality of bank policies that require clients to allow the bank to use their personal information for such purposes as "to determine your eligibility for products and services we offer". CIPPIC also argued that banks must obtain the express consent of clients to any such secondary uses of personal financial information; opt-out consent is not sufficient.

In response to a request by the Office of the Privacy Commissioner, CIPPIC agreed to put its complaint on hold while it pursues resolution of the issues with the Canadian Bankers' Association and the Investment Industry Regulatory Organization of Canada.

Resources

Letter dated August 1, 2008. [2]