Volume II

Issue : 21: November 4, 2004

• U.S. and Antigua Break Off Settlement Talks in Internet Gambling Dispute
• New U.S. Federal Appeals Court Ruling on DMCA and Printer Cartridge Chips
• Report Concludes Cease and Desist Letters Under DMCA Abused
• Employers Collection of Biometric Information Not Contravention of PIPEDA
• Ontario Court Decision Shows Potential Problems with Enforcing Non-Solicitation Covenants
• UK Courts Address Jurisdiction in Internet Libel Cases
• Austrian Supreme Court Awards Costs in ICANN UDRP Case
• Ontario Enacts New Health Privacy Legislation
• North Carolina Man Sentenced to Nine Years for Sending Spam

Home > Volume II > Issue 21: November 4, 2004 > Employers Collection of Biometric Information Not Contravention of PIPEDA

Employers Collection of Biometric Information Not Contravention of PIPEDA

A number of employees complained about their employer's collection of biometric information from them, namely their voice prints, for the purpose of voice password technology.

The employer provided three purposes to justify the collection of this personal information under subsection 5(3) of the Canadian Personal Information Protection and Electronic Documents Act: security, efficiency, and cost-effectiveness. The Assistant Privacy Commissioner found that these purposes were valid and in particular, that the voice password technology helped ensure security of customer data and safeguard the personal information of customers. Further, the Assistant Commissioner found that the use of the voice print in these circumstances, which was solely for one-to-one authentication purposes, was fairly benign.

For copy of the decision, visit:

http://www.privcom.gc.ca/cf-dc/2004/cf-dc_040903_e.asp