{"id":39833,"date":"2025-10-08T11:50:43","date_gmt":"2025-10-08T15:50:43","guid":{"rendered":"https:\/\/www.millerthomson.com\/?p=39833"},"modified":"2025-11-14T16:27:51","modified_gmt":"2025-11-14T21:27:51","slug":"social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report","status":"publish","type":"post","link":"https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/","title":{"rendered":"Social media platform in the privacy hot seat: Key takeaways from the Privacy Commissioner\u2019s report"},"content":{"rendered":"\n<p>In September 2025, the <a href=\"https:\/\/www.priv.gc.ca\/en\/\">Office of the Privacy Commissioner of Canada<\/a> (the \u201c<strong>OPC<\/strong>\u201d), together with its counterparts in <a href=\"https:\/\/oipc.ab.ca\/\">Alberta<\/a>, <a href=\"https:\/\/www.oipc.bc.ca\/\">British Columbia<\/a>, and <a href=\"https:\/\/www.cai.gouv.qc.ca\/\">Quebec<\/a> (collectively, the \u201c<strong>Offices<\/strong>\u201d),<a href=\"#_ftn1\" id=\"_ftnref1\">[1]<\/a> commenced an <a href=\"https:\/\/www.priv.gc.ca\/en\/opc-actions-and-decisions\/investigations\/investigations-into-businesses\/2025\/pipeda-2025-003\/\">investigation into the privacy practices of TikTok<\/a>.<a href=\"#_ftn2\" id=\"_ftnref2\">[2]<\/a><\/p>\n\n\n\n<p>Social media platforms are highly popular among youth and are one of the main drivers of increased screen use among minors. Depending on the study and its recency, the average child in Canada (aged 5-17) spends between two and seven hours per day using their phone or another personal device. Increasingly, screen time has been linked to various mental health concerns in youth, with <a href=\"https:\/\/doi.org\/10.24095\/hpcdp.45.7\/8.01\">compelling indications<\/a> suggesting that additional screen time results in a higher risk of developing anxiety disorders and depression, as well as overall decreased happiness.<a href=\"#_ftn3\" id=\"_ftnref3\">[3]<\/a><\/p>\n\n\n\n<p>Although the Offices\u2019 investigation did not directly address these broader societal concerns about screen time among minors, this context underlies many of the concerns voiced in the findings, such as children\u2019s increased susceptibility to advertising and the promotion of negative body image.<\/p>\n\n\n\n<p>For Canadian businesses, the message is clear: regulators are raising the bar. Companies that collect and use personal information, especially from minors, must ensure their purposes are legitimate, their consent mechanisms are robust, and their privacy communications are accessible.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Why did Canadian regulators investigate TikTok?<\/h2>\n\n\n\n<p>TikTok\u2014one of, if not <em>the<\/em>, most popular social media platforms used by Canadian children \u2014has long faced scrutiny over privacy and national security concerns, including the ordered dissolution of TikTok Technology Canada, Inc. following a national security review, and the app\u2019s ban from Canadian government-issued devices.<\/p>\n\n\n\n<p>The Offices\u2019 joint investigation examined whether TikTok\u2019s collection, use, and disclosure of the personal information of individuals in Canada for the purposes of ad targeting and content personalization complied with federal and provincial privacy laws (collectively, the \u201c<strong>Acts<\/strong>\u201d).<a href=\"#_ftn4\" id=\"_ftnref4\">[4]<\/a><\/p>\n\n\n\n<p>The investigation focused on two key issues:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Whether TikTok\u2019s practices engaged in targeted advertising and content personalization practices that a reasonable person would consider to be appropriate; and<\/li>\n\n\n\n<li>Whether TikTok obtained valid and meaningful consent and, for individuals in Quebec, met transparency obligations under Quebec\u2019s\u00a0<em>Act Respecting the Protection of Personal Information in the Private Sector<\/em>\u00a0(\u201c<strong>Quebec\u2019s Private Sector Act<\/strong>\u201d).<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">What were the regulators\u2019 findings and why TikTok\u2019s practices raised concerns<\/h2>\n\n\n\n<p>TikTok collects extensive personal information from its users to support a variety of business functions, including content personalization, targeted advertising, improving the effectiveness of advertising campaigns, enforcing platform policies, promoting security, and developing its machine learning models and algorithms. The Offices examined whether using children\u2019s personal information for content personalization and ad targeting would be considered appropriate under Canadian privacy laws.<\/p>\n\n\n\n<p>TikTok maintained that it does not intentionally collect or use the personal information of underage users. However, evidence showed that large numbers of children continue to use the platform and that TikTok has not implemented effective safeguards to prevent their access or to stop their personal information from being collected and exploited. In fact, TikTok acknowledged that it bans approximately 500,000 underage Canadian accounts each year but relies heavily on weak detection methods, such as self-declared birthdates and limited human moderation tools, leaving many underage users undetected.<\/p>\n\n\n\n<p>Regulators found this inadequate given the sensitivity of children\u2019s data and TikTok\u2019s ability to use sophisticated tools for other business purposes. Importantly:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Under the <em>Personal Information Protection and Electronic Documents Act<\/em>\u00a0(\u201cPIPEDA\u201d)<\/strong>: Subsection 5(3) requires that purposes be those a reasonable person would consider appropriate in the circumstances\u2014a test that involves balancing commercial needs against individuals\u2019 privacy rights.<\/li>\n\n\n\n<li><strong>In Alberta and British Columbia<\/strong>: The respective <em>Personal Information Protection Acts<\/em> adopt similar language, <a id=\"_ftnref5\" href=\"#_ftn5\">[5]<\/a> and past orders in both provinces have stressed that collection must address a legitimate issue. In this case, TikTok\u2019s purposes were not considered legitimate needs, particularly given that the company\u2019s own terms prohibit underage users entirely.<\/li>\n\n\n\n<li><strong>In Quebec<\/strong>: <em><a href=\"https:\/\/www.priv.gc.ca\/media\/1972\/dec_050816_e.pdf\">Quebec\u2019s Private Sector Act<\/a> <\/em>imposes even stricter rules and requires purposes to be \u201cserious and legitimate.\u201d It specifically prohibits the collection of information from minors under 14 without parental consent unless it is clearly for the child\u2019s benefit.<a id=\"_ftnref6\" href=\"#_ftn6\">[6]<\/a> TikTok neither obtained such consent nor pursued purposes that could be said to benefit minors.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Did TikTok obtain meaningful consent?<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Consent requirements under <em>PIPEDA, British Columbia\u2019s\u00a0Personal Information Protection Act\u00a0(\u201cPIPA BC\u201d)<\/em> and <em>Alberta\u2019s\u00a0Personal Information Protection Act\u00a0(\u201cPIPA AB\u201d)<\/em><\/h3>\n\n\n\n<p>PIPEDA<em>, <\/em>PIPA AB, and PIPA BC require consent for the collection, use, or disclosure of individuals\u2019 personal information, unless an exception applies. Under <em>PIPEDA<\/em>, organizations must explain their purposes in a manner that allows users to reasonably understand the nature, purposes, and consequences of the collection, use, or disclosure. To assist organizations in assessing the adequacy of any obtained consent under various privacy laws, the OPC, the Office of the Information and Privacy Commissioner of Alberta, and the Office of the Information and Privacy Commissioner for British Columbia jointly issued the <a href=\"https:\/\/www.priv.gc.ca\/en\/privacy-topics\/collecting-personal-information\/consent\/gl_omc_201805\/\"><em>Guidelines for Obtaining Meaningful Consent<\/em><\/a> (the \u201c<strong>Consent Guidelines<\/strong>\u201d).<\/p>\n\n\n\n<p>The Offices considered whether TikTok obtained valid consent from users for the collection and use of their personal information to serve them targeted ads and tailored content. In this case, express consent was required because:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>the personal information collected and used by TikTok through tracking and profiling was likely sensitive; and<\/li>\n\n\n\n<li>the collection or use of personal information went beyond what a reasonable user would expect.<\/li>\n<\/ol>\n\n\n\n<p>Although TikTok requires users to expressly accept its Terms and Conditions during the initial setup, the Offices found that such consent was not meaningful, comprehensive, or understandable.<a href=\"#_ftn7\" id=\"_ftnref7\">[7]<\/a> Specifically:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Terms and Conditions:<\/strong> The Terms and Conditions did not provide sufficient information to users about the material being collected.<\/li>\n\n\n\n<li><strong>Privacy Policy<\/strong>: The Privacy Policy was unclear and lacked the necessary level of detail to support meaningful consent. While supplementary privacy resources were available to users, the information was scattered across the website, not linked to the Privacy Policy, difficult to locate, and not available in French.<\/li>\n\n\n\n<li><strong>Supplement Privacy Resources<\/strong>: TikTok failed to adequately explain its collection and use of users\u2019 biometric information. \u00a0While some references to biometric data appeared in the Privacy Policy, they did not fully describe TikTok\u2019s uses of that information, including for determining users\u2019 age and gender to deliver tailored advertising and content.<\/li>\n<\/ol>\n\n\n\n<p>Notably, the Offices also found that information need not be uniquely identifying to be considered biometric information or to reveal sensitive information about an individual.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How did TikTok fare under Quebec\u2019s transparency rules?<\/h2>\n\n\n\n<p>The investigation also considered whether TikTok met its transparency obligations for individuals in Quebec. Section 8 of <a href=\"https:\/\/www.priv.gc.ca\/media\/1972\/dec_050816_e.pdf\">Quebec\u2019s Private Sector Act<\/a> requires companies to inform individuals when their personal information is collected, while section 8.1 requires companies that use technology capable of locating, identifying, or profiling an individual to:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>inform the person of the use of the technology; and<\/li>\n\n\n\n<li>inform them of the means available to activate the functions that allow a person to be identified, located, or profiled.<a id=\"_ftnref8\" href=\"#_ftn8\">[8]<\/a><\/li>\n<\/ul>\n\n\n\n<p>Evidence collected during the investigation flagged that TikTok collects personal information through technology that enables the identification, location, or profiling of users. This information can then be used to deliver targeted advertisements and tailor content recommendations. The investigation determined that TikTok\u2019s Privacy Policy and Terms and Conditions did not fulfill its obligations under sections 8 and 8.1 of the Quebec\u2019s Private Sector Act. In addition, TikTok failed to comply with section 9.1 of Quebec\u2019s Private Sector Act, as its privacy settings did not provide the highest level of privacy by default without any intervention by the user.<\/p>\n\n\n\n<p>During the course of the investigation, TikTok worked to expand the information available to Canadian users in its Privacy Policy. While these were positive steps forward, the Offices stressed the increased risk of harm to users in this case and recommended stricter privacy communications in order to obtain meaningful consent from users.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What compliance recommendations were made?<\/h2>\n\n\n\n<p>In response to TikTok\u2019s contraventions, the Offices recommended that the company immediately:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>cease using Canadians\u2019 personal information for targeted advertising and content personalization;<\/li>\n\n\n\n<li>implement effective measures to prevent underage users from accessing the platform;<\/li>\n\n\n\n<li>deactivate functions that collect personal information in Quebec by default until users are informed;<\/li>\n\n\n\n<li>enhance privacy settings to provide the highest level of protection by default; and<\/li>\n\n\n\n<li>improve privacy communications to ensure meaningful consent is obtained, particularly for the collection and use of biometric information.<\/li>\n<\/ul>\n\n\n\n<p>While TikTok disagreed with some of the findings, it confirmed its willingness to promptly implement other recommendations.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Key takeaways for businesses<\/h2>\n\n\n\n<p>The investigation into TikTok underscores the heightened regulatory focus on how organizations collect and use children\u2019s and other personal information in Canada. The Offices made it clear that businesses should keep the following principles top of mind:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Children\u2019s data is inherently sensitive. <\/strong>As such, itrequires a higher standard of protection and safeguards. The Offices will consider the sophistication of an organization\u2019s operations and expect large corporations to use all available tools to safeguard children\u2019s information and limit its collection wherever possible.<\/li>\n\n\n\n<li><strong>Ensure your business purposes are reasonable and legitimate. <\/strong>Organizations should collect, use, and discle personal information only where necessary, and such purposes must be clearly communicated to users.<\/li>\n\n\n\n<li><strong>Consent must be meaningful and transparent.<\/strong> Long, legalistic terms of service or buried privacy policies are insufficient, especially where biometric or profiling technologies are involved. Organizations operating in Quebec must also account for stricter provincial privacy obligations, including providing clear explanations of their practices and setting privacy-protective defaults for users.<\/li>\n\n\n\n<li><strong>Quebec has stricter obligations<\/strong>. Businesses must comply with additional transparency and default privacy requirements.<\/li>\n<\/ol>\n\n\n\n<p>Canadian regulators are raising the bar on privacy compliance. Businesses should proactively review their privacy frameworks, especially if operating across multiple provinces, and strengthen their consent and transparency practices.<\/p>\n\n\n\n<p>If your organization collects or uses personal data in Canada, now is the time to review your privacy practices. Our Privacy &amp; Cybersecurity team regularly advises businesses on compliance with federal and provincial privacy laws, including consent, transparency, and cross-jurisdictional risks.\u00a0 If you have any questions or would like guidance on ensuring your organization\u2019s privacy policies comply with the Offices\u2019 guidance, please contact a member of the Miller Thomson LLP\u00a0<a href=\"https:\/\/www.millerthomson.com\/en\/expertise\/technology-ip-and-privacy\/privacy-and-cybersecurity\/\">Privacy &amp; Cybersecurity team<\/a>.<\/p>\n\n\n\n<p>Stay informed on key legal developments by subscribing to our <a href=\"https:\/\/www.millerthomson.com\/en\/subscription\/\">newsletters<\/a>.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p><a href=\"#_ftnref1\" id=\"_ftn1\">[1]<\/a> Being the Commission d\u2019acc\u00e8s \u00e0 l\u2019information du Qu\u00e9bec (CAI), the Office of the Information and Privacy Commissioner for British Columbia (OIPC BC), and the Office of the Information and Privacy Commissioner of Alberta (OIPC AB).<\/p>\n\n\n\n<p><a href=\"#_ftnref2\" id=\"_ftn2\">[2]<\/a> <em>Joint investigation of TikTok Pte. Ltd. by the Office of the Privacy Commissioner of Canada, the Commission d\u2019acc\u00e8s \u00e0 l\u2019information du Qu\u00e9bec, the Office of the Information and Privacy Commissioner for British Columbia, and the Office of the Information and Privacy Commissioner of Alberta<\/em>, 23 September 2025, PIPEDA Findings #2025-003, &lt;<a href=\"https:\/\/www.priv.gc.ca\/en\/opc-actions-and-decisions\/investigations\/investigations-into-businesses\/2025\/pipeda-2025-003\/\">https:\/\/www.priv.gc.ca\/en\/opc-actions-and-decisions\/investigations\/investigations-into-businesses\/2025\/pipeda-2025-003\/<\/a>&gt;.<\/p>\n\n\n\n<p><a href=\"#_ftnref3\" id=\"_ftn3\">[3]<\/a> Toigo, Stephanie et al., \u201cRecreational Screen Time and Mental Health Among Canadian Children and Youth\u201d (2025) 45:7\/8 <em>Health Promotion and Chronic Disease Prevention in Canada<\/em> 45-7\/8, &lt;<a href=\"https:\/\/doi.org\/10.24095\/hpcdp.45.7\/8.01\">https:\/\/doi.org\/10.24095\/hpcdp.45.7\/8.01<\/a>&gt;.<\/p>\n\n\n\n<p><a href=\"#_ftnref4\" id=\"_ftn4\">[4]<\/a> Specifically, the&nbsp;<em>Personal Information Protection and Electronic Documents Act <\/em>[<strong><em>PIPEDA<\/em><\/strong>], Quebec\u2019s&nbsp;<em>Act Respecting the Protection of Personal Information in the Private Sector<\/em> [<strong><em>Quebec\u2019s Private Sector Act<\/em><\/strong>], British Columbia\u2019s&nbsp;<em>Personal Information Protection Act<\/em>&nbsp;[<strong><em>PIPA BC<\/em><\/strong>], and Alberta\u2019s&nbsp;<em>Personal Information Protection Act<\/em>&nbsp;[<strong><em>PIPA AB<\/em><\/strong>].<\/p>\n\n\n\n<p><a href=\"#_ftnref5\" id=\"_ftn5\">[5]<\/a> <em>PIPA AB<\/em> ss. 11, 14; <em>PIPA BC<\/em> ss. 11, 16.<\/p>\n\n\n\n<p><a href=\"#_ftnref6\" id=\"_ftn6\">[6]<\/a> <em>Quebec\u2019s Private Sector Act<\/em>, sa. 4, 4.1.<\/p>\n\n\n\n<p><a href=\"#_ftnref7\" id=\"_ftn7\">[7]<\/a> <em>PIPEDA<\/em> ss. 4.3 and 4.3.2 of Schedule 1, s. 6.1; <em>PIPA AB<\/em> ss. 7, 8; PIPA BC ss. 6, 7.<\/p>\n\n\n\n<p><a href=\"#_ftnref8\" id=\"_ftn8\">[8]<\/a> <em>Quebec\u2019s Private Sector Act<\/em>, ss. 8, 8.1.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In September 2025, the Office of the Privacy Commissioner of Canada (the \u201cOPC\u201d), together with its counterparts in Alberta, British Columbia, and Quebec (collectively, the \u201cOffices\u201d),[1] commenced an investigation into the privacy practices of TikTok.[2] Social media platforms are highly popular among youth and are one of the main drivers of increased screen use among [&hellip;]<\/p>\n","protected":false},"author":122,"featured_media":30996,"parent":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[557],"insight-format":[416],"class_list":["post-39833","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology-ip-and-privacy"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.1.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>TikTok privacy concerns raised by the OPC: Key takeaways regarding personal information in Canada<\/title>\n<meta name=\"description\" content=\"In September 2025, Canadian privacy regulators launched a joint investigation into TikTok\u2019s data practices, raising the bar for privacy compliance in Canada.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"TikTok privacy concerns raised by the OPC: Key takeaways regarding personal information in Canada\" \/>\n<meta property=\"og:description\" content=\"In September 2025, Canadian privacy regulators launched a joint investigation into TikTok\u2019s data practices, raising the bar for privacy compliance in Canada.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/\" \/>\n<meta property=\"og:site_name\" content=\"Miller Thomson\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/MillerThomsonLaw\/\" \/>\n<meta property=\"article:published_time\" content=\"2025-10-08T15:50:43+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-11-14T21:27:51+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.millerthomson.com\/wp-content\/uploads\/2025\/04\/insights_technology_mobile.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"1098\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Sebastian Vives\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@millerthomson\" \/>\n<meta name=\"twitter:site\" content=\"@millerthomson\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Sebastian Vives\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/\"},\"author\":{\"name\":\"Sebastian Vives\",\"@id\":\"https:\/\/www.millerthomson.com\/en\/#\/schema\/person\/be05481ca4ee617c24b33993ade4c881\"},\"headline\":\"Social media platform in the privacy hot seat: Key takeaways from the Privacy Commissioner\u2019s report\",\"datePublished\":\"2025-10-08T15:50:43+00:00\",\"dateModified\":\"2025-11-14T21:27:51+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/\"},\"wordCount\":1914,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.millerthomson.com\/en\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.millerthomson.com\/wp-content\/uploads\/2025\/04\/insights_technology_mobile.jpg\",\"articleSection\":[\"Technology, IP and Privacy\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/#respond\"]}]},{\"@type\":[\"WebPage\",\"ItemPage\"],\"@id\":\"https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/\",\"url\":\"https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/\",\"name\":\"TikTok privacy concerns raised by the OPC: Key takeaways regarding personal information in Canada\",\"isPartOf\":{\"@id\":\"https:\/\/www.millerthomson.com\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.millerthomson.com\/wp-content\/uploads\/2025\/04\/insights_technology_mobile.jpg\",\"datePublished\":\"2025-10-08T15:50:43+00:00\",\"dateModified\":\"2025-11-14T21:27:51+00:00\",\"description\":\"In September 2025, Canadian privacy regulators launched a joint investigation into TikTok\u2019s data practices, raising the bar for privacy compliance in Canada.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/#primaryimage\",\"url\":\"https:\/\/www.millerthomson.com\/wp-content\/uploads\/2025\/04\/insights_technology_mobile.jpg\",\"contentUrl\":\"https:\/\/www.millerthomson.com\/wp-content\/uploads\/2025\/04\/insights_technology_mobile.jpg\",\"width\":1920,\"height\":1098,\"caption\":\"woman scrolling through social media on a smart phone holding a mug of coffee\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.millerthomson.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Social media platform in the privacy hot seat: Key takeaways from the Privacy Commissioner\u2019s report\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.millerthomson.com\/en\/#website\",\"url\":\"https:\/\/www.millerthomson.com\/en\/\",\"name\":\"Miller Thomson\",\"description\":\"National law firm providing business law expertise and litigation and disputes services for businesses across Canada since 1957.\",\"publisher\":{\"@id\":\"https:\/\/www.millerthomson.com\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.millerthomson.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.millerthomson.com\/en\/#organization\",\"name\":\"Miller Thomson\",\"url\":\"https:\/\/www.millerthomson.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.millerthomson.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.millerthomson.com\/wp-content\/uploads\/2024\/10\/miller-thomson.svg\",\"contentUrl\":\"https:\/\/www.millerthomson.com\/wp-content\/uploads\/2024\/10\/miller-thomson.svg\",\"width\":380,\"height\":50,\"caption\":\"Miller Thomson\"},\"image\":{\"@id\":\"https:\/\/www.millerthomson.com\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/MillerThomsonLaw\/\",\"https:\/\/x.com\/millerthomson\",\"https:\/\/www.linkedin.com\/company\/miller-thomson-llp\/\",\"https:\/\/www.youtube.com\/@millerthomson\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.millerthomson.com\/en\/#\/schema\/person\/be05481ca4ee617c24b33993ade4c881\",\"name\":\"Sebastian Vives\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.millerthomson.com\/en\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/9c50194d3d05da0f277cc6ce0c163d04a4150aed35e0d008c0cba4866c37cc31?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/9c50194d3d05da0f277cc6ce0c163d04a4150aed35e0d008c0cba4866c37cc31?s=96&d=mm&r=g\",\"caption\":\"Sebastian Vives\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"TikTok privacy concerns raised by the OPC: Key takeaways regarding personal information in Canada","description":"In September 2025, Canadian privacy regulators launched a joint investigation into TikTok\u2019s data practices, raising the bar for privacy compliance in Canada.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/","og_locale":"en_US","og_type":"article","og_title":"TikTok privacy concerns raised by the OPC: Key takeaways regarding personal information in Canada","og_description":"In September 2025, Canadian privacy regulators launched a joint investigation into TikTok\u2019s data practices, raising the bar for privacy compliance in Canada.","og_url":"https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/","og_site_name":"Miller Thomson","article_publisher":"https:\/\/www.facebook.com\/MillerThomsonLaw\/","article_published_time":"2025-10-08T15:50:43+00:00","article_modified_time":"2025-11-14T21:27:51+00:00","og_image":[{"width":1920,"height":1098,"url":"https:\/\/www.millerthomson.com\/wp-content\/uploads\/2025\/04\/insights_technology_mobile.jpg","type":"image\/jpeg"}],"author":"Sebastian Vives","twitter_card":"summary_large_image","twitter_creator":"@millerthomson","twitter_site":"@millerthomson","twitter_misc":{"Written by":"Sebastian Vives","Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/#article","isPartOf":{"@id":"https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/"},"author":{"name":"Sebastian Vives","@id":"https:\/\/www.millerthomson.com\/en\/#\/schema\/person\/be05481ca4ee617c24b33993ade4c881"},"headline":"Social media platform in the privacy hot seat: Key takeaways from the Privacy Commissioner\u2019s report","datePublished":"2025-10-08T15:50:43+00:00","dateModified":"2025-11-14T21:27:51+00:00","mainEntityOfPage":{"@id":"https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/"},"wordCount":1914,"commentCount":0,"publisher":{"@id":"https:\/\/www.millerthomson.com\/en\/#organization"},"image":{"@id":"https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/#primaryimage"},"thumbnailUrl":"https:\/\/www.millerthomson.com\/wp-content\/uploads\/2025\/04\/insights_technology_mobile.jpg","articleSection":["Technology, IP and Privacy"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/#respond"]}]},{"@type":["WebPage","ItemPage"],"@id":"https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/","url":"https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/","name":"TikTok privacy concerns raised by the OPC: Key takeaways regarding personal information in Canada","isPartOf":{"@id":"https:\/\/www.millerthomson.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/#primaryimage"},"image":{"@id":"https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/#primaryimage"},"thumbnailUrl":"https:\/\/www.millerthomson.com\/wp-content\/uploads\/2025\/04\/insights_technology_mobile.jpg","datePublished":"2025-10-08T15:50:43+00:00","dateModified":"2025-11-14T21:27:51+00:00","description":"In September 2025, Canadian privacy regulators launched a joint investigation into TikTok\u2019s data practices, raising the bar for privacy compliance in Canada.","breadcrumb":{"@id":"https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/#primaryimage","url":"https:\/\/www.millerthomson.com\/wp-content\/uploads\/2025\/04\/insights_technology_mobile.jpg","contentUrl":"https:\/\/www.millerthomson.com\/wp-content\/uploads\/2025\/04\/insights_technology_mobile.jpg","width":1920,"height":1098,"caption":"woman scrolling through social media on a smart phone holding a mug of coffee"},{"@type":"BreadcrumbList","@id":"https:\/\/www.millerthomson.com\/en\/insights\/technology-ip-and-privacy\/social-media-platform-in-the-privacy-hot-seat-key-takeaways-from-the-privacy-commissioners-report\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.millerthomson.com\/en\/"},{"@type":"ListItem","position":2,"name":"Social media platform in the privacy hot seat: Key takeaways from the Privacy Commissioner\u2019s report"}]},{"@type":"WebSite","@id":"https:\/\/www.millerthomson.com\/en\/#website","url":"https:\/\/www.millerthomson.com\/en\/","name":"Miller Thomson","description":"National law firm providing business law expertise and litigation and disputes services for businesses across Canada since 1957.","publisher":{"@id":"https:\/\/www.millerthomson.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.millerthomson.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.millerthomson.com\/en\/#organization","name":"Miller Thomson","url":"https:\/\/www.millerthomson.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.millerthomson.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.millerthomson.com\/wp-content\/uploads\/2024\/10\/miller-thomson.svg","contentUrl":"https:\/\/www.millerthomson.com\/wp-content\/uploads\/2024\/10\/miller-thomson.svg","width":380,"height":50,"caption":"Miller Thomson"},"image":{"@id":"https:\/\/www.millerthomson.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/MillerThomsonLaw\/","https:\/\/x.com\/millerthomson","https:\/\/www.linkedin.com\/company\/miller-thomson-llp\/","https:\/\/www.youtube.com\/@millerthomson"]},{"@type":"Person","@id":"https:\/\/www.millerthomson.com\/en\/#\/schema\/person\/be05481ca4ee617c24b33993ade4c881","name":"Sebastian Vives","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.millerthomson.com\/en\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/9c50194d3d05da0f277cc6ce0c163d04a4150aed35e0d008c0cba4866c37cc31?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9c50194d3d05da0f277cc6ce0c163d04a4150aed35e0d008c0cba4866c37cc31?s=96&d=mm&r=g","caption":"Sebastian Vives"}}]}},"_links":{"self":[{"href":"https:\/\/www.millerthomson.com\/en\/wp-json\/wp\/v2\/posts\/39833","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.millerthomson.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.millerthomson.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.millerthomson.com\/en\/wp-json\/wp\/v2\/users\/122"}],"replies":[{"embeddable":true,"href":"https:\/\/www.millerthomson.com\/en\/wp-json\/wp\/v2\/comments?post=39833"}],"version-history":[{"count":0,"href":"https:\/\/www.millerthomson.com\/en\/wp-json\/wp\/v2\/posts\/39833\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.millerthomson.com\/en\/wp-json\/wp\/v2\/media\/30996"}],"wp:attachment":[{"href":"https:\/\/www.millerthomson.com\/en\/wp-json\/wp\/v2\/media?parent=39833"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.millerthomson.com\/en\/wp-json\/wp\/v2\/categories?post=39833"},{"taxonomy":"insight-format","embeddable":true,"href":"https:\/\/www.millerthomson.com\/en\/wp-json\/wp\/v2\/insight-format?post=39833"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}