A recent decision of the Office of the Privacy Commissioner of Canada (the “Commissioner”), finding that analyzing a customer’s credit rating does little to help counter insurance fraud, will seem shocking to many in the insurance industry. In making this decision, the Commissioner has denounced something that is common industry practice in assessing the legitimacy of claims.1