Limiting Collection of Driver’s Licence Information
Is there anything more annoying that 100 people ahead of you in line when you are trying to purchase that perfect holiday gift? Well what about while you are in the midst of your harried purchase, being asked to pull out your driver’s licence so the retailer can record the number? Not only can this be annoying, but it might also be a violation of your personal privacy.
The Office of the Privacy Commissioner and the Information and Privacy Commissioners of Alberta and British Columbia recently announced the release of a guide for retailers who make it a practice to collect driver’s licence information and numbers. This guide is meant to help these retailers better protect the privacy of their customers.
In general, privacy legislation (such as the federal Personal Information Protection and Electronic Documents Act, PIPEDA, and Alberta’s and British Columbia’s respective Personal Information Protection Acts) requires an organization to collect, use or disclose personal information for appropriate and reasonable purposes, to limit collection to what is necessary to meet their purposes, and to make sure this information is properly safeguarded.
In practice, retailers often record or photocopy a driver’s licence for a number of purposes, such as to verify an individual’s identity. However, this may be accomplished in a less privacy intrusive manner, such as examining the driver’s licence to confirm information, or in some cases limiting collection to the name and address that appears on the card.
The guide indicates that a driver’s licence contains sensitive information. Recording, scanning or photocopying the card may result in the collection of information such as a photograph, height, physical descriptions and other information – far more detail than what the retailer needs to conduct their business.
There may be some cases where it is ok to record some of this information, for example the collection of limited personal information during a refund or exchange (PIPEDA Case Summary #361). However it may not be reasonable to record driver’s licence numbers for the return of products (Settled Case # 16).
You can always ask for an explanation as to why your driver’s licence information is being collected, especially if it is being photocopied. If you still have concerns whether this collection is appropriate, you can visit the OPC website, refer to this guide or contact the appropriate Privacy Commissioner’s Office for further information.




2 Responses
11:25 am
I remember there being one nightclub in Toronto where they would ask everyone who wanted to enter for their driver’s license, supposedly for verifying a person’s age. Their way of performing this verification was to swipe the card through a portable reader. It is only later, when a person’s birthday approaches, that the true meaning of this procedure would be revealed: the club would be sending out inivtations for holding a birthday party with friends at the club. The information for this obviously came from the driver’s license scan.
I also heard from someone in the scene that this information would also be data-mined to determine where in the city most guests came from, what age-groups lived where, etc.
4:51 am
I have found out that the Alberta Solictors Office is selling the Personal Drivers information to: Collection Agencies and Financial Institutions. Citizen Privacy truley does not exist in Canada.
Leave a Reply