Anonymised, illustrative composite. A brokerage hired a licensed drone operator for an aerial video of a lakefront property. Nobody reviewed the raw footage for what else it had captured before the video went up.
At a glance
A brokerage commissioned a certified drone operator to shoot an aerial video for a lakefront listing — the kind of hero shot that sells waterfront property, climbing from the dock to show the shoreline and the lot in context. The flight path swept across the property line on its way up.
The finished edit, published to the brokerage's YouTube channel and shared on social media the same day, included about eleven seconds where the camera's arc crossed into the neighbouring yard clearly enough to make out two people and a licence plate. Nobody had reviewed the raw footage specifically for identifiable third parties before it went up publicly; the edit was checked for framing and music, not for who else was in frame. The operator held a valid pilot certificate and had registered the drone correctly — every airspace and licensing requirement was satisfied. None of that touches the separate question of what happens to an identifiable person's image once it is captured and published for a commercial purpose.
No dollar figure drives this file — the exposure here is regulatory and reputational, not a quantifiable loss. The video had been live for roughly 40 hours across two platforms before the complaint arrived, which is the number that mattered: long enough to be indexed and shared before anyone at the brokerage saw the footage as anything other than a good aerial shot.
Canada's federal privacy law follows the camera, not just the subject matter. The Office of the Privacy Commissioner's own analysis is direct on drones specifically: where UAVs are used for commercial aims, their use is covered by PIPEDA, on the same basis as any other data collection — and a real estate marketing video is squarely commercial use. The OPC also flags the exact misconception this file ran into: “it is a common misconception that a company does not require permission to take an individual's photograph in a public place” — and a private backyard is not even public in the first place. Transport Canada's own drone-safety guidance adds a second, independent obligation that sits alongside the privacy question: “you must respect the privacy rights of others when you fly” is stated as a standing duty on the pilot, separate from airspace and registration rules, and it does not turn on whether the footage was captured deliberately.
The brokerage took the video down within hours of the complaint, re-edited it to cut the eleven seconds entirely, and reposted the shorter version. It also contacted the neighbour directly to confirm the footage had been deleted from the platform's servers, not just unlisted. No regulatory complaint to the OPC followed — the fast, complete takedown is very likely why. Ontario has no general private-sector privacy law of its own standing in for PIPEDA the way Alberta, British Columbia and Quebec's laws do; the Office of the Privacy Commissioner confirms Ontario sits among the provinces where PIPEDA governs the private sector directly, so there was no separate provincial regime to check — PIPEDA was simply the answer, and the only one.
The tell was reviewing the edit for the listing's sake and never for anyone else's. A drone hero shot is, structurally, a wide sweep over private land that was never asked to be filmed — the neighbour's yard was never part of the brief, but the flight path put it in frame anyway, and nobody's job on the file was to watch for that. The fix that stuck afterward was procedural: every drone edit gets one pass specifically for identifiable people, vehicles, or addresses outside the subject property before it is approved to post, separate from the creative review.
The consent question here is narrower than it first looks: nobody needed the neighbour's permission to fly the drone or to film the listing property. What triggered the obligation was the eleven seconds where their own yard, and they themselves, became the subject — incidentally captured is still captured, and PIPEDA's consent principle attaches to the image the moment a person in it can reasonably be identified, not to the operator's intent when the camera swept past. The principle itself is precise about what triggers it: Schedule 1, Clause 4.3 of PIPEDA requires “the knowledge and consent of the individual… for the collection, use, or disclosure of personal information, except where inappropriate” — a threshold that turns on whether a person is identifiable in what was captured, not on what the operator meant to film. Treadstone Law’s own overview of the underlying test is the same one this file turned on: personal information plus commercial activity is generally enough to bring PIPEDA into play, and a real estate marketing video clears that bar easily.
A 30-minute call is enough to tell you whether AI pays for itself here.
