Privacy Commissioner Jennifer Stoddart told the CBC that "Google did capture personal information - and, in some cases, highly sensitive personal information such as complete e-mails." Stoddart went on to call the incident "a serious violation of Canadiens' privacy rights."

According to the article, information included email addresses, user names, passwords, names and telephone numbers, addresses and even health details. Google has until February 1 to delete all of the information.

A report by Stoddart found that a Google engineer was responsible for the inadvertent collection of personal data when the engineer failed to follow company procedures involving legal review of code.