A joint investigation by four Canadian federal and provincial privacy authorities determined fast food restaurant chain Tim Hortons' application tracked and recorded users’ movements every few minutes daily, even when it was closed. Authorities said the app collected a “continual” and “vast” amount of location information — including where users lived, worked and traveled — while leading users to believe data was collected only when the app was in use. Tim Hortons agreed to implement recommendations that it delete remaining location data held by the company or third-party providers, establish a privacy management program and report compliance steps.
Privacy authorities find Tim Hortons app collected ‘continual,’ ‘vast’ location data
RELATED STORIES
A view from DC: The growing reckoning over location data
Notes from the IAPP Canada: CRA breach a 'cautionary tale'
Notes from the IAPP Europe: October wrap-up
Council of Europe's Framework Convention on AI and its global implications
Notes from the Asia-Pacific region: Amid festive backdrop, Singapore unveils secure AI guidelines