Canadian privacy watchdogs powerless to hold Crime Stoppers accountable for data breach
A CBC investigation revealed that over 1.5 million Canadian Crime Stoppers tips were compromised in a data breach involving a third-party vendor. Privacy watchdogs in Canada have stated they lack the legal authority to investigate the organization due to gaps in private-sector privacy laws.
Why it matters
This highlights a significant regulatory loophole in Canadian privacy law that leaves non-profit organizations handling sensitive data outside the oversight of government watchdogs.
The true scale of the hack was revealed by an exclusive CBC investigation , which found that more than 1.5 million Canadian tips submitted to Crime Stoppers programs across the country over the past 25 years were compromised.
More than 850,000 tips — about half of all Canadian records identified — included personally identifiable information. We could not determine in every instance whether the information belonged to a tipster, a victim or someone accused of a crime.
Hackers stole the data last March from Navigate360, a U.S. third party that Crime Stoppers hired to manage and secure its anonymous tips.
But CBC has learned that neither the Office of the Privacy Commissioner of Canada (OPC) nor the Information and Privacy Commissioner of Ontario (IPC) can formally investigate Crime Stoppers for failing to protect tipsters' personal information, due to a glaring gap in Canada's privacy laws.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in