The privacy commissioner also investigated a complaint that Loblaws transferred sensitive personal information it collected from customers requesting cards to a third-party company in the U.S ...