Federal Court Orders Privacy Commissioner to Investigate Complaint

The Federal Court of Canada yesterday issued an important decision addressing the jurisdictional reach of Canada's privacy legislation.  The case involved a complaint launched by Pippa Lawson of CIPPIC against U.S.-based over the collection and use of her personal information.  The Privacy Commissioner refused to investigate, arguing that declined to cooperate with the investigation and that she therefore lacked the jurisdiction to proceed.

CIPPIC applied for judicial review and yesterday won the case.  The court gets it exactly right – "with respect, I think the Commissioner did not distinguish her power to investigate from the effectiveness of her investigation."   In other words, Abika's unwillingness to cooperate should not have posed a barrier to investigating.  Indeed, the only barrier was erected by the Privacy Commissioner, whose decision made it impossible for Lawson to seek damages in federal court (going to federal court is contingent on completion of an investigation).

This could prove to be an important decision as it highlights the fact that Canadians can launch complaints against out-of-country entities who collect and use their personal information in violation of the law (and rightly concludes the location of the website server is not determinative for jurisdictional purposes).  Moreover, it challenges the Privacy Commissioner to address such complaints, concluding that "it would be most regrettable indeed if Parliament gave the Commissioner jurisdiction to investigate foreigners who have Canadian sources of information only if those organizations voluntarily name names."

One Comment

  1. Breach Extraordinaire
    I would like an investigation launched into the breach of sensitive medical information that was obtained by citizens purchasing auctioned off computers from Telus related to the provincial government of BC. No one has investigated this breach and no one affected has been notified. This is reprehensible particlarly as the people affected do not have a voice in public affairs. Something should be done about this.