Statement on MetCap’s Inadequate Privacy Policy

October 7, 2026

Why can’t a 22,000-unit landlord get privacy right?

Technologists for Democracy (TfD) stands with the residents of 105 Isabella Street in Toronto and with Javier Ruiz-Soler. His complaints have led the Office of the Privacy Commissioner of Canada to investigate and find that MetCap “is inappropriately collecting personal information from inside the tenants’ units.” The Commissioner also found that:

  • MetCap failed to provide Ruiz-Soler with access to his own personal information, 
  • MetCap failed to provide contact information for their privacy officer, and
  • MetCap’s public documents did not explain how video footage is managed.

Ruiz-Soler says his concerns went unaddressed for years.

Report of Findings (PIPEDA-049999)
Issued: June 8, 2026

1. The Office of the Privacy Commissioner received a complaint under the Personal Information Protection and Electronic Documents Act (PIPEDA or the Act) from an individual alleging that MetCap Living Management Inc. (MetCap) inappropriately collected personal information without consent. Specifically, he claims that the organization inappropriately collected personal information from inside the tenants' units via the newly installed hallway security cameras.

2. The complainant also alleges that the organization did not provide the tenants notice of the installation of the security cameras and that information regarding how the footage is used and stored is not included in the organization's public facing documents in contravention of the Openness provision of PIPEDA.

3. Finally, the complainant claims that MetCap denied him access to his personal information, did not reply to his privacy inquiries nor provide the privacy officer's contact information upon request in contravention of both the Access and Challenging Compliance provisions of the Act.

4. Following our investigation of the matters raised in the complaint, we have concluded the following:
a. MetCap is inappropriately collecting personal information from inside the tenants' units via the hallway security cameras: well-founded and not resolved;
b. MetCap did not reply to the complainants access request and therefore denied him access to his personal information: well founded;
c. MetCap has failed to provide the privacy officer's contact information upon request and respond to the complaint's privacy inquiries: well founded; and 
d. Information regarding the management of the personal information collected via the CCTV system is not included in the organization's public facing documents: well founded and conditionally resolved.
Excerpt of the report by the Office of the Privacy Commissioner of Canada.

MetCap’s VP of Operations, Michael Guyette, said the company “acknowledges the seriousness of the concerns raised and has taken steps to address them.” But if this is the case, after tenants raised their concerns with the building manager, why did it take a complaint to the federal regulator for MetCap to act?

The same issues have shown up at another MetCap building. In March 2026, one of TfD’s volunteers asked for their CCTV policy. MetCap replied that per their own policy, “camera footage is not allowed to be released to the tenants.” We then wrote to MetCap’s privacy office and received a draft policy that was “not yet finalized.” We raised concerns about operating cameras without a finalized policy, and with the draft itself. We did not receive any relevant answers. In our last correspondence with MetCap, they indicated that the building was no longer being managed by MetCap.

The policy now on MetCap’s website is essentially that same draft, and none of our points have been addressed. It provides no details on retention period, states nothing about audio, and does not specify where footage is stored. It also states that requested footage showing anyone other than the requesting resident “will not be provided.” The OPC guidance says otherwise: “Individuals have the right to access images relating to them. When disclosing recordings to individuals who appear in them, the organization must ensure that identifying information about any other individuals on the recording is not revealed. This can be done through technologies that mask identity.”

Tenants have a right to know what is being recorded, why it is being recorded, how long it is kept, where cameras are, and who sees it. A company of this size can afford to pay someone whose job is to know the basics of Canadian privacy law.

Comments

Leave a Reply

Discover more from Technologists for Democracy

Subscribe now to keep reading and get access to the full archive.

Continue reading