Shostack + Friends Blog Archive


Private to CIBC: That wasn't a challenge

Last month, I asked “What Do You Need To Do To Get Fined?” in reference to CIBC’s improper disclosure issues. Now the Ottawa Citizen is reporting that “Bank springs another privacy leak:”

Fresh off fax blunders that earned it a rebuke from the federal privacy commissioner, the Canadian Imperial Bank of Commerce admitted yesterday that it mistakenly handed over the personal-account details of more than 100 individuals.

So I’d just like to make clear: I was not challenging CIBC to abuse the privacy of their customers until they are fined. I think that would be a poor business choice. (Via