British Columbia Information and Privacy Commissioner Issues Decision on PAWSH OASIS PET RESORT's Disclosure of Personal Information

Strategic Insights -

The British Columbia Information and Privacy Commissioner has issued a decision on the disclosure of personal information by PAWSH OASIS PET RESORT. The complaint was made by a former client who alleged that the Resort disclosed her personal information contrary to the Personal Information Protection Act (PIPA) when it posted her personal information in reply to her online review. The Adjudicator found that PIPA did not authorize the disclosure of the personal information and that the Resort had contravened s. 6 of the Act.

Key Takeaways:

  • The complainant alleged that the Resort disclosed her personal information contrary to PIPA when it posted her personal information in reply to her online review.
  • The Adjudicator found that the information at issue was the personal information of the complainant and that it was not contact information or work product information.
  • The Resort did not have the authority to disclose the personal information without the consent of the complainant, and it did not comply with the provisions of PIPA that would have deemed the complainant to have provided consent.
  • The Adjudicator found that the sole intended purpose for the Resort disclosing the personal information was to refute the complainant's review of the Resort and discredit her account of events in the eyes of the public, which is not a provision that authorizes an organization to disclose personal information without consent.
  • The Adjudicator ordered the Resort to remove all personal information about the complainant that it had posted on the internet and to provide confirmation that it has deleted the complainant's personal information by April 15, 2025.
  • The Adjudicator's decision highlights the importance of organizations complying with the provisions of PIPA when disclosing personal information, particularly when it comes to responding to online reviews.

Statistics:

  • 1 out of 1 cases were conceded by the respondent.
  • 0 out of 1 cases were disregarded by the adjudicator due to lack of evidence.
  • 1 order was made by the Adjudicator to remove all personal information about the complainant that it had posted on the internet.

Sources:

  • CanLII: 2025 BCIPC 18
  • Quicklaw: [2025] B.C.I.P.C.D. No. 18
  • Personal Information Protection Act, SBC 2003 c. 63, ss. 6, 8, 18.