Digital Marketing And Analytics: Lessons For Canadian Retailers Using Offline Conversion Tools Following Privacy Commissioner's Ruling

A recent decision by the Office of the Privacy Commissioner of Canada (OPC) illustrates the complex and often ambiguous nature of consent under Canadian federal privacy legislation, the Personal Information Protection and Electronic Documents Act (PIPEDA). It also highlights key implications for Canadian retailers processing data as part of their digital marketing and analytics efforts, using offline conversion tools.

Background

In PIPEDA Findings # 2023-001, these issues are discussed in the context of a complaint related to the sharing of customers' personal information by a Canadian retailer, Home Depot of Canada Inc., with Facebook's parent company, Meta Platforms, Inc. (f/k/a Facebook, Inc.) (Meta), using its business tool known as "Offline Conversions." This tool helps businesses measure the impact of their online advertising campaigns on in-store sales by sharing a hashed version of their customers' contact information and in-store transaction data with a