Privacy commissioners found RBI subsidiary Tim Hortons tracked app users without valid consent

Summary

A joint Canadian privacy investigation found that Restaurant Brands International subsidiary Tim Hortons collected granular location data through its app from May 2019 until August 2020, including while the app was closed, without valid consent and for a purpose the commissioners found inappropriate. The report found contraventions of federal and provincial privacy laws. Tim Hortons disabled the tracking and accepted the recommendations, and the matter was classified well-founded and conditionally resolved on June 1, 2022. Primary source: https://www.priv.gc.ca/en/opc-actions-and-decisions/investigations/investigations-into-businesses/2022/pipeda-2022-001/