Canada’s privacy regulator opened a probe into ID-scanner IDScan.

Bar and venue patrons who scanned a license never agreed to become a breach target.

The probe covers IDScan’s security practices and whether it properly notified victims, as required under Canada’s federal privacy law.

The regulator has not set a timeline for its findings or any penalty against IDScan.

How each outlet framed it
The Record leans critical
credits journalist Brian Krebs's dark web investigation in breach discovery, focuses Canadian privacy law notification probe

Sources: The Record