Skip to main content
Glama

Search privacy enforcement actions

privacy_search_enforcement_actions
Read-onlyIdempotent

Search verified Canadian privacy enforcement actions: CAI orders and decisions under Quebec Law 25 and OPC findings under PIPEDA. Use this when someone asks about privacy fines, enforcement cases against a company, what regulators decided, or investigations (for example 'Has the CAI fined anyone for facial recognition?' or 'TikTok privacy investigation Canada'). Returns matching cases with dates, plain-language summaries, penalties, and links to the official regulator source. Start here to find a case ID, then call privacy_get_enforcement_case for full details. Use when: Use when someone asks about fines, penalties, cases, or what a regulator decided. Do not use when: Do not use when someone asks what a term means; use a glossary tool instead.

Input Schema

NameRequiredDescriptionDefault
yearNoFilter by decision year.
limitNoMaximum cases to return in this call.
queryNoFree-text search over case titles and summaries.
offsetNoNumber of matching cases to skip. Use next_offset from the previous response to page forward.
regulatorNoLimit to one regulator: 'cai' (Quebec Commission d'acces a l'information, Law 25) or 'opc' (federal Office of the Privacy Commissioner, PIPEDA).

Output Schema

NameRequiredDescriptionDefault
resultsYesMatching enforcement actions.
has_moreYesTrue when more results exist beyond this page.
truncatedYesTrue when results were shortened to fit the 50 KB output cap. Use the paginated REST API for the full set.
next_offsetYesPass as 'offset' in the next call to continue paging. Null when has_more is false.
total_countYesTotal number of matches across all pages.
corpus_versionYesSemantic version of the movahedi.ca statutory corpus this answer was drawn from, for example v2026.12.0. Pin it when citing; when it changes, re-read the affected resources and the change log at https://movahedi.ca/changelog/.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed2 schema fields changed
    • addedOutput schema / properties / corpus_version
      Added value: +{
      +  "description": "Semantic version of the movahedi.ca statutory corpus this answer was drawn from, for example v2026.12.0. Pin it when citing; when it changes, re-read the affected resources and the change log at https://movahedi.ca/changelog/.",
      +  "examples": [
      +    "v2026.12.0"
      +  ],
      +  "type": "string"
      +}
    • changedOutput schema / required
      Previous value: -[
      -  "results",
      -  "total_count",
      -  "has_more",
      -  "next_offset",
      -  "truncated"
      -]New value: +[
      +  "results",
      +  "total_count",
      +  "has_more",
      +  "next_offset",
      +  "truncated",
      +  "corpus_version"
      +]
  2. First observed

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, non-destructive and closed-world, so the safety profile is covered; the description adds real value beyond that by naming the covered regulators, noting results carry plain-language summaries, penalties and official source links, and explaining the follow-up call pattern. It stops short of stating data coverage limits (earliest available year, how complete each regulator's corpus is) or result-count/pagination behavior, which are the remaining unknowns for a search tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the resource definition, then examples, then return shape, then routing — a sensible order with no filler. The 'Use when' line partially restates the opening paragraph's list of triggers ('fines, enforcement cases'), a small redundancy, but the structure remains scannable.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be explained, yet the description still summarizes them usefully and names the natural follow-up tool. What's missing for a search tool of this complexity is behavior on empty result sets and whether paging totals are exposed; the schema's offset description covers paging mechanics, so the gap is minor rather than disqualifying.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and each parameter is documented in-schema, so the baseline of 3 applies. The description adds example query strings that illustrate free-text usage, but it never mentions the year or regulator filters, which are the two parameters most likely to change agent behavior; notably the schema's year bounds (minimum 2000, maximum 1970) are self-contradictory and the description offers no compensating guidance.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (search) and resource (verified Canadian privacy enforcement actions) and scopes it precisely to CAI orders under Quebec Law 25 and OPC findings under PIPEDA. It explicitly positions itself as the entry point versus the sibling privacy_get_enforcement_case, so an agent can distinguish the two without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Contains explicit 'Use when' and 'Do not use when' sections, gives concrete trigger questions ('Has the CAI fined anyone for facial recognition?'), and routes the agent elsewhere for terminology lookups. It also states the two-step workflow: search here for a case ID, then call privacy_get_enforcement_case for details.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources