A security guard employed by a private company observes an individual shoplifting. The guard apprehends the individual and, during the incident report, includes their full name, home address, and date of birth, which were obtained from the individual's driver's license. Under which condition would the collection and retention of this specific personal information likely be permissable under PIPEDA?

Question: A security guard employed by a private company observes an individual shoplifting. The guard apprehends the individual and, during the incident report, includes their full name, home address, and date of birth, which were obtained from the individual's driver's license. Under which condition would the collection and retention of this specific personal information likely be permissable under PIPEDA?

Answer options: ✅ The information is directly relevant to the investigation of a criminal offense.

• It is necessary for the security company's internal record-keeping and insurance purposes.
• The individual explicitly consented to the collection of all their personal details for the report.
• The information is publicly available through open-source channels.

Correct answer: The information is directly relevant to the investigation of a criminal offense.

Explanation: PIPEDA allows for the collection, use, and disclosure of personal information without consent in certain circumstances, including when it is reasonable to believe that the information relates to the commission of a criminal offence or is required by law. In this scenario, the full personal details are directly relevant to the investigation and potential legal consequences of shoplifting.