Ad company AggregateIQ broke privacy laws on Brexit, U.S. politics, investigation finds - 2019-11-26
An investigation has found AggregateIQ (AIQ), a Victoria-based online political advertising company, failed to meet its obligations under Canadian privacy laws when it used and disclosed the personal information of millions of voters in British Columbia, the United States and the United Kingdom.
The investigation conduced by the Office of the Information and Privacy Commissioner for British Columbia and the Office of the Privacy Commissioner of Canada found the company failed to ensure appropriate consent for its use and disclosure of the personal information of voters.
The investigation also found the company did not take reasonable steps to ensure that consent obtained by its international clients was valid for its practices in Canada. As well, AggregateIQ did not take reasonable security measures to protect personal information, leading to a privacy breach in 2018.