P2017-ND-153

The information at issue makes up a spreadsheet listing of vehicles that have been tracked as being exported to China, along with the vehicle?s VIN number, and information about the individuals who initially purchased the vehicles in Canada. The Organization reported ?The list outlined ? vehicles which had been tracked as being exported to China illegally?. On or around March 27-31, 2017, a sales person with the Organization provided the list to a customer whose name appeared on it. The Organization learned of the unauthorized disclosure of the list on September 26, 2017 when the customer made a complaint to the Office of the Information and Privacy Commissioner (OIPC). The Organization initially believed only a portion of the list had been photographed from the salesperson?s screen and sent to the customer; however, when notified of the complaint made to the OIPC, the Organization learned the entire list had been emailed to the customer.