The federal privacy watchdog has found Staples Canada did not fully remove personal information from returned laptops that it later resold.
The Privacy Commissioner of Canada says its staff recently analyzed laptops returned by customers to four Ontario Staples stores and found 23 per cent of the devices had personal information including names, email addresses, account info, email fragments and partial images of faces.
Get breaking National news
It gave Staples nine months to develop clear standards for wiping devices, improve staff training and hire an independent third-party to conduct an annual spot check on returned devices.
The commissioner started looking into the retailer’s data policies after a former Staples sales associate alleged laptops were not always wiped following their return.
- Poilievre to campaign for Canadian unity in Alberta next week ahead of referendum
- Province interfering in Edmonton housing sets disturbing precedent: Calgary mayor
- Okanagan growers say crop insurance isn’t keeping up with a changing climate
- 1 in 3 young Canadians use AI once a month for mental health, report shows
In some cases, the complainant said the computers were stored with the previous owner’s username and password showing on the device. In at least one instance, he saw a laptop resold that still had unwiped personal information from a previous customer.
The commissioner had audited Staples in 2011 over similar concerns and says its new investigation revealed that some of the same problems persisted 15 years later.
Comments
Want to discuss? Please read our Commenting Policy first.