Compliance Radar

Who was sanctioned, and for what?

Fines, court rulings and incidents from Europe and North America: 718 cases from 32 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.

Retail and e-commerce Loblaw Companies Limited Clear all filters

1case from 1 jurisdiction

—Total of monetary amounts (0 cases with an amount)

—Largest single case

—Median per case with an amount

Click a bar to drill down one level.

by amount by number of cases

Where?

by region

All jurisdictions

Canada 1 case 100 % ·

What for?

by area of law

All areas of law

Data protection 1 case 100 % ·

Who?

by company

When?

per quarter, by date of decision

Trend
Period	Cases	Total
Q3 2023	0	—
Q4 2023	0	—
Q1 2024	0	—
Q2 2024	0	—
Q3 2024	0	—
Q4 2024	0	—
Q1 2025	0	—
Q2 2025	0	—
Q3 2025	0	—
Q4 2025	0	—
Q1 2026	1	—
Q2 2026	0	—
Q3 2026	0	—

1 case

Newest first Highest amounts

5 Mar 2026 Loblaw Companies LimitedOPC: Loblaw must change retention of PC Optimum data after account deletion CanadaData subject rights and transparency Other

During a wave of boycotts in 2024, Loblaw did not process deletion requests in time and retained purchase and usage data from the loyalty programme (more than 17 million members) even after accounts were closed, without demonstrating effective anonymisation. Loblaw undertook to the Office of the Privacy Commissioner of Canada (OPC) to have the anonymisation independently reviewed and to carry out annual deletions.

What organisations can take from it

Companies that continue to use data as anonymous after account deletion must be able to demonstrate the re-identification risk – IP addresses are often enough to link data to a person.

Authority / court: Office of the Privacy Commissioner of Canada (OPC)
Area of law: Data protection · Data subject rights and transparency
Legal basis: PIPEDA
Action: Other
Status of proceedings: unknown
Sector: Retail and e-commerce
Employees: 10,000 or more
Published: 5 Mar 2026

Sources

PIPEDA Findings #2026-001: Investigation into the personal information retention practices of Loblaw for the PC Optimum Loyalty Program Decision of an authority

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

How the radar is compiled

Official sources only

Every case is based on a decision, press release or database of an authority or a court. Press and law-firm reports count at most as additional references.

Four-eyes check

Whoever enters a case may not approve it. A second, independent check compares company, date, amount and area of law with the source. Only then is the case published.

Comparable amounts

Amounts are converted at the ECB reference rate on the day of the decision. Each case also shows the original amount.

Corrections on record

A correction is a new version that is checked again. Every change is logged. You can report errors directly on each case.

Case texts are translated from the German original. Where a translation is not yet available, the German text is shown and marked “(German original)”. Names of authorities, laws and companies are given as in the source.

The radar reports on published decisions and is not legal advice. Decisions that are not yet final are marked as such where the status is known.

Embed the radar on your website

Who was sanctioned, and for what?

Ready for training that sticks?