Last week’s revelations on the massive number of requests for subscriber information focused specifically on the responses from major Canadian telecom and Internet providers. The Privacy Commissioner of Canada wrote to the 12 largest providers, who responded with a single document that aggregated the responses of 11 of the companies (though some declined to provide information to questions such as how many user accounts were disclosed).
The Access to Information Act requested documents that contained the telco response also revealed that the Privacy Commissioner sent a similar letter to the leading Internet and technology companies. The list of recipients included Apple, Google, Facebook, Microsoft, Twitter, and eBay. While some of the companies now offer transparency reports that feature data on disclosure requests (and compliance with those requests), few did in 2011. On Friday, I received a supplemental document to my access to information request that contains the full response from Apple Canada.
The document is notable for several reasons. First, Apple Canada responded within one month of the Privacy Commissioner letter, promptly providing specific information on its practices. It advises that the company has a database of approximately 10 million individuals and that it received about 100 requests for information on its users. It does not charge a fee to comply with those requests.
Second, much like the telecom and Internet companies, Apple Canada does not notify the individuals whose information has been requested or disclosed.
Third, I have been advised that there are no other relevant documents to the request. This confirms that Apple Canada was the only company to respond to the Privacy Commissioner request. The other major companies apparently did not respond. Their transparency reports now provide raw data on access requests, though their specific policies on requests, notification of affected individuals, and fees related to requests largely remains a mystery.