TikTok's Privacy Blunders: A Wake-Up Call For Business Owners

New guidance from the offices of the Canadian Privacy Commissioner and the Quebec, British Columbia, and Alberta Privacy Commissioners (collectively, the "Offices") has been published through the recently released decision in PIPEDA Findings # 2025-003 (the "Finding") with respect to the Offices' expectations of organizations who are collecting, using, or disclosing personal data. While there has been no great overnight amendment to the Personal Information Protection and Electronic Documents Act ("PIPEDA") or other privacy legislation, the Finding makes clear that businesses will be held to a high standard when it comes to privacy and will likely need to update their own privacy policies and privacy-related documentation post-Finding. A summary of the Finding can be found below, but first, in review of the Offices' decision, here are the eight primary points made with respect to privacy practices, consent requirements, and what they mean for businesses that