As you know, this week is Data Privacy Week, and today we have released the results of our investigation into Home Depot Canada’s sharing of customer information with Meta Platforms, which operates Facebook. Our key finding, and an important reminder for all organizations, is that when a customer chooses to receive an electronic receipt instead of a printed one, they are not consenting to have their personal information shared with third parties.

Since at least 2018, Home Depot had been collecting customer email addresses at store checkouts for the stated purpose of providing customers with an electronic copy of their receipt.