Alberta
Tim Hortons app violated privacy laws in collection of ‘vast amounts’ of sensitive location data
People who downloaded the Tim Hortons app had their movements tracked and recorded every few minutes of every day, even when their app was not open, in violation of Canadian privacy laws, a joint investigation by federal and provincial privacy authorities has found.
The investigation concluded that Tim Hortons’ continual and vast collection of location information was not proportional to the benefits Tim Hortons may have hoped to gain from better targeted promotion of its coffee and other products.
The Office of the Privacy Commissioner of Canada, Commission d’accès à l’information du Québec, Office of the Information and Privacy Commissioner for British Columbia, and Office of the Information and Privacy Commissioner of Alberta issued their Report of Findings today.
The Tim Hortons app asked for permission to access the mobile device’s geolocation functions, but misled many users to believe information would only be accessed when the app was in use. In reality, the app tracked users as long as the device was on, continually collecting their location data.
The app also used location data to infer where users lived, where they worked, and whether they were travelling. It generated an “event” every time users entered or left a Tim Hortons competitor, a major sports venue, or their home or workplace.
The investigation uncovered that Tim Hortons continued to collect vast amounts of location data for a year after shelving plans to use it for targeted advertising, even though it had no legitimate need to do so.
The company says it only used aggregated location data in a limited way, to analyze user trends – for example, whether users switched to other coffee chains, and how users’ movements changed as the pandemic took hold.
While Tim Hortons stopped continually tracking users’ location in 2020, after the investigation was launched, that decision did not eliminate the risk of surveillance. The investigation found that Tim Hortons’ contract with an American third-party location services supplier contained language so vague and permissive that it would have allowed the company to sell “de-identified” location data for its own purposes.
There is a real risk that de-identified geolocation data could be re-identified. A research report by the Office of the Privacy Commissioner of Canada underscored how easily people can be identified by their movements.
Location data is highly sensitive because it can be used to infer where people live and work, reveal trips to medical clinics. It can be used to make deductions about religious beliefs, sexual preferences, social political affiliations and more.
Organizations must implement robust contractual safeguards to limit service providers’ use and disclosure of their app users’ information, including in de-identified form. Failure to do so could put those users at risk of having their data used by data aggregators in ways they never envisioned, including for detailed profiling.
The investigation also revealed that Tim Hortons lacked a robust privacy management program for the app, which would have allowed the company to identify and address many of the privacy contraventions the investigation found.
The four privacy authorities recommended that Tim Hortons:
- Delete any remaining location data and direct third-party service providers to do the same;
- Establish and maintain a privacy management program that: includes privacy impact assessments for the app and any other apps it launches; creates a process to ensure information collection is necessary and proportional to the privacy impacts identified; ensures that privacy communications are consistent with, and adequately explain app-related practices; and
- Report back with the details of measures it has taken to comply with the recommendations.
Tim Hortons agreed to implement the recommendations.
QUOTES
“Tim Hortons clearly crossed the line by amassing a huge amount of highly sensitive information about its customers. Following people’s movements every few minutes of every day was clearly an inappropriate form of surveillance. This case once again highlights the harms that can result from poorly designed technologies as well as the need for strong privacy laws to protect the rights of Canadians.”
“This report eloquently illustrates the risks inherent in the use of geolocation and the importance of transparent and accountable privacy practices. Without a suitable prior assessment, Tim Hortons collected sensitive information about its customers through its app, without their adequate knowledge or consent. It is to put an end to this kind of practice that Quebec has reviewed its legislation protecting personal information giving more powers to the Commission and making companies more accountable. ”
“This investigation sends a strong message to organizations that you can’t spy on your customers just because it fits in your marketing strategy. Not only is this kind of collection of information a violation of the law, it is a complete breach of customers’ trust. The good news in this case is that Tim Hortons has agreed to follow the recommendations we set out, and I hope other organizations can learn from the results of this investigation.”
“This investigation is yet another example where an organization has not effectively notified customers about its practices. Tim Hortons’ customers did not have adequate information to consent to the location tracking that was actually occurring. When people download and use these types of apps, it’s important that they know in advance what will happen to their personal information and that organizations follow through with their commitments.”
Alberta
Alberta’s new diagnostic policy appears to meet standard for Canada Health Act compliance
From the Fraser Institute
By Nadeem Esmail, Mackenzie Moir and Lauren Asaad
In October, Alberta’s provincial government announced forthcoming legislative changes that will allow patients to pay out-of-pocket for any diagnostic test they want, and without a physician referral. The policy, according to the Smith government, is designed to help improve the availability of preventative care and increase testing capacity by attracting additional private sector investment in diagnostic technology and facilities.
Unsurprisingly, the policy has attracted Ottawa’s attention, with discussions now taking place around the details of the proposed changes and whether this proposal is deemed to be in line with the Canada Health Act (CHA) and the federal government’s interpretations. A determination that it is not, will have both political consequences by being labeled “non-compliant” and financial consequences for the province through reductions to its Canada Health Transfer (CHT) in coming years.
This raises an interesting question: While the ultimate decision rests with Ottawa, does the Smith government’s new policy comply with the literal text of the CHA and the revised rules released in written federal interpretations?
According to the CHA, when a patient pays out of pocket for a medically necessary and insured physician or hospital (including diagnostic procedures) service, the federal health minister shall reduce the CHT on a dollar-for-dollar basis matching the amount charged to patients. In 2018, Ottawa introduced the Diagnostic Services Policy (DSP), which clarified that the insured status of a diagnostic service does not change when it’s offered inside a private clinic as opposed to a hospital. As a result, any levying of patient charges for medically necessary diagnostic tests are considered a violation of the CHA.
Ottawa has been no slouch in wielding this new policy, deducting some $76.5 million from transfers to seven provinces in 2023 and another $72.4 million in 2024. Deductions for Alberta, based on Health Canada’s estimates of patient charges, totaled some $34 million over those two years.
Alberta has been paid back some of those dollars under the new Reimbursement Program introduced in 2018, which created a pathway for provinces to be paid back some or all of the transfers previously withheld on a dollar-for-dollar basis by Ottawa for CHA infractions. The Reimbursement Program requires provinces to resolve the circumstances which led to patient charges for medically necessary services, including filing a Reimbursement Action Plan for doing so developed in concert with Health Canada. In total, Alberta was reimbursed $20.5 million after Health Canada determined the provincial government had “successfully” implemented elements of its approved plan.
Perhaps in response to the risk of further deductions, or taking a lesson from the Reimbursement Action Plan accepted by Health Canada, the province has gone out of its way to make clear that these new privately funded scans will be self-referred, that any patient paying for tests privately will be reimbursed if that test reveals a serious or life-threatening condition, and that physician referred tests will continue to be provided within the public system and be given priority in both public and private facilities.
Indeed, the provincial government has stated they do not expect to lose additional federal health care transfers under this new policy, based on their success in arguing back previous deductions.
This is where language matters: Health Canada in their latest CHA annual report specifically states the “medical necessity” of any diagnostic test is “determined when a patient receives a referral or requisition from a medical practitioner.” According to the logic of Ottawa’s own stated policy, an unreferred test should, in theory, be no longer considered one that is medically necessary or needs to be insured and thus could be paid for privately.
It would appear then that allowing private purchase of services not referred by physicians does pass the written standard for CHA compliance, including compliance with the latest federal interpretation for diagnostic services.
But of course, there is no actual certainty here. The federal government of the day maintains sole and final authority for interpretation of the CHA and is free to revise and adjust interpretations at any time it sees fit in response to provincial health policy innovations. So while the letter of the CHA appears to have been met, there is still a very real possibility that Alberta will be found to have violated the Act and its interpretations regardless.
In the end, no one really knows with any certainty if a policy change will be deemed by Ottawa to run afoul of the CHA. On the one hand, the provincial government seems to have set the rules around private purchase deliberately and narrowly to avoid a clear violation of federal requirements as they are currently written. On the other hand, Health Canada’s attention has been aroused and they are now “engaging” with officials from Alberta to “better understand” the new policy, leaving open the possibility that the rules of the game may change once again. And even then, a decision that the policy is permissible today is not permanent and can be reversed by the federal government tomorrow if its interpretive whims shift again.
The sad reality of the provincial-federal health-care relationship in Canada is that it has no fixed rules. Indeed, it may be pointless to ask whether a policy will be CHA compliant before Ottawa decides whether or not it is. But it can be said, at least for now, that the Smith government’s new privately paid diagnostic testing policy appears to have met the currently written standard for CHA compliance.
Lauren Asaad
Policy Analyst, Fraser Institute
Alberta
Housing in Calgary and Edmonton remains expensive but more affordable than other cities
From the Fraser Institute
By Tegan Hill and Austin Thompson
In cities across the country, modest homes have become unaffordable for typical families. Calgary and Edmonton have not been immune to this trend, but they’ve weathered it better than most—largely by making it easier to build homes.
Specifically, faster permit approvals, lower municipal fees and fewer restrictions on homebuilders have helped both cities maintain an affordability edge in an era of runaway prices. To preserve that edge, they must stick with—and strengthen—their pro-growth approach.
First, the bad news. Buying a home remains a formidable challenge for many families in Calgary and Edmonton.
For example, in 2023 (the latest year of available data), a typical family earning the local median after-tax income—$73,420 in Calgary and $70,650 in Edmonton—had to save the equivalent of 17.5 months of income in Calgary ($107,300) or 12.5 months in Edmonton ($73,820) for a 20 per cent down payment on a typical home (single-detached house, semi-detached unit or condominium).
Even after managing such a substantial down payment, the financial strain would continue. Mortgage payments on the remaining 80 per cent of the home’s price would have required a large—and financially risky—share of the family’s after-tax income: 45.1 per cent in Calgary (about $2,757 per month) and 32.2 per cent in Edmonton (about $1,897 per month).
Clearly, unless the typical family already owns property or receives help from family, buying a typical home is extremely challenging. And yet, housing in Calgary and Edmonton remains far more affordable than in most other Canadian cities.
In 2023, out of 36 major Canadian cities, Edmonton and Calgary ranked 8th and 14th, respectively, for housing affordability (relative to the median after-tax family income). That’s a marked improvement from a decade earlier in 2014 when Edmonton ranked 20th and Calgary ranked 30th. And from 2014 to 2023, Edmonton was one of only four Canadian cities where median after-tax family income grew faster than the price of a typical home (in Calgary, home prices rose faster than incomes but by much less than in most Canadian cities). As a result, in 2023 typical homes in Edmonton cost about half as much (again, relative to the local median after-tax family income) as in mid-sized cities such as Windsor and Kelowna—and roughly one-third as much as in Toronto and Vancouver.
To be clear, much of Calgary and Edmonton’s improved rank in affordability is due to other cities becoming less and less affordable. Indeed, mortgage payments (as a share of local after-tax median income) also increased since 2014 in both Calgary and Edmonton.
But the relative success of Alberta’s two largest cities shows what’s possible when you prioritize homebuilding. Their approach—lower municipal fees, faster permit approvals and fewer building restrictions—has made it easier to build homes and helped contain costs for homebuyers. In fact, homebuilding has been accelerating in Calgary and Edmonton, in contrast to a sharp contraction in Vancouver and Toronto. That’s a boon to Albertans who’ve been spared the worst excesses of the national housing crisis. It’s also a demographic and economic boost for the province as residents from across Canada move to Alberta to take advantage of the housing market—in stark contrast to the experience of British Columbia and Ontario, which are hemorrhaging residents.
Alberta’s big cities have shown that when governments let homebuilders build, families benefit. To keep that advantage, policymakers in Calgary and Edmonton must stay the course.
-
Business2 days agoTaxing food is like slapping a surcharge on hunger. It needs to end
-
International2 days agoOttawa is still dodging the China interference threat
-
Energy2 days ago75 per cent of Canadians support the construction of new pipelines to the East Coast and British Columbia
-
Health1 day agoFDA warns ‘breast binder’ manufacturers to stop marketing to gender-confused girls
-
Business20 hours agoThere’s No Bias at CBC News, You Say? Well, OK…
-
COVID-192 days agoJudge denies Canadian gov’t request to take away Freedom Convoy leader’s truck
-
espionage2 days agoCarney Floor Crossing Raises Counterintelligence Questions aimed at China, Former Senior Mountie Argues
-
Agriculture1 day agoSupply Management Is Making Your Christmas Dinner More Expensive


