The digital firm AggregateIQ based in Victoria has been found to have breached Canadian privacy laws. The Office of the Information and Privacy Commissioner for British Columbia and for Canada found the breach when the firm used and disclosed the personal information of millions of voters in B.C., the United States, and the United Kingdom. They say AIQ:
- failed to ensure appropriate consent for its use and disclosure of the personal information of voters.
- did not take reasonable steps to ensure that consent obtained by its international clients was valid for its practices in Canada.
- did not take reasonable security measures to protect personal information, leading to a privacy breach in 2018.