The Canadian Privacy Commissioner has issued several new findings including one involving a complaint against a loyalty program that inadvertently disclosed the email addresses of 618 program participants. The commissioner ruled that error was a violation of PIPEDA, though unlike a similar case in the United States involving Eli Lilly, the name of program was not disclosed nor was any punishment levied.