How Europe is dealing with online privacy by safwat sayed (CC BY-ND 2.0) https://flic.kr/p/bk53au

How Europe is dealing with online privacy by safwat sayed (CC BY-ND 2.0) https://flic.kr/p/bk53au

News

Say Anything: The Government’s Response to its Disintegrating “Privacy” Reform Strategy

The Supreme Court of Canada’s Spencer decision is still only a few days old, but it has become clear that the ruling has left the government’s privacy and lawful access strategy in tatters. I’ve posted earlier on how the decision – which held that Canadians have reasonable expectation of privacy in their subscriber information and that voluntary disclosure of such information to the police constitutes an unlawful search – blows away the government’s plans for Bills C-13 and S-4 by contradicting longstanding government policy positions.

While there are options for the government to establish reforms that are consistent with the court ruling and that would grant police the access they say they need, government ministers have instead adopted a rather bizarre response of saying anything, no matter how inconsistent with prior positions, the court’s analysis, or public comments from authorities such as the Privacy Commissioner of Canada. There is admittedly a track record for this: Conservatives have dismissed privacy concerns from Carole Todd, the Boys and Girls Club of Canada, the Privacy Commissioner of Canada, and many more. Further, the Conservative leader in the Senate claims Spencer has “no impact whatsoever” on Bill S-4.

However, the inconsistencies or misleading comments from government ministers takes this to another level. The government’s brief to the Supreme Court of Canada in the Spencer case states:

does a person enjoy a reasonable expectation of privacy in subscriber information? Put another way, should the police have to get judicial authorization to determine the physical address of an internet connection and the subscriber’s name before they apply for judicial authorization to search that physical address? The answer to those questions must be “no”, for the subscriber information sought says nothing more than that a person or company has an internet link.

Justice Minister Peter MacKay argued in favour of voluntary disclosure in the House of Commons when moving that Bill C-13 be read a second time:

organizations would still be bound by the Personal Information Protection and Electronic Documents Act, something known as PIPEDA, which makes it clear that an organization is entitled to voluntarily disclose personal information to the police, without the consent of the person to have the information relayed.

The court responded directly to these positions in Spencer:

in the totality of the circumstances of this case, there is a reasonable expectation of privacy in the subscriber information. The disclosure of this information will often amount to the identification of a user with intimate or sensitive activities being carried out online, usually on the understanding that these activities would be anonymous. A request by a police officer that an ISP voluntarily disclose such information amounts to a search.

Yet how does MacKay now characterize the decision? On Tuesday, he argued that the case confirms what the government has said all along:

The Supreme Court’s decision actually confirms what the government has said all along, that Bill C-13’s proposals regarding voluntary disclosures do not provide legal authority for access to information without a warrant.

On Wednesday, he doubled down by quoting from the Spencer decision:

let us look at the actual Supreme Court decision, paragraph 73. It is a declaratory provision that confirms the existing common law powers of police officers to make enquiries as indicated by the fact that the section begins with the phrase “for a greater certainty”. That is exactly what we have been saying. It is the same provision of Bill C-13.

Yet anyone who reads paragraph 73 will know that MacKay references only the first half of the paragraph.  Read in its entirety, the court argues the opposite:

With respect, I cannot accept that this conclusion applies to s. 7(3) (c.1)(ii) of PIPEDA .Section 487.014(1)  is a declaratory provision that confirms the existing common law powers of police officers to make enquiries, as indicated by the fact that the section begins with the phrase “[f]or greater certainty”: see Ward, at para. 49. PIPEDA  is a statute whose purpose, as set out in s. 3 , is to increase the protection of personal information. Since in the circumstances of this case the police do not have the power to conduct a search for subscriber information in the absence of exigent circumstances or a reasonable law, I do not see how they could gain a new search power through the combination of a declaratory provision and a provision enacted to promote the protection of personal information.

MacKay is not alone in engaging in creative interpretations. Daniel Therrien, the new Privacy Commissioner who was just appointed by the Conservatives, gave an interview to the Globe and Mail this week , in which he said that Bills C-13 and S-4 should be reviewed in light of the Spencer decision. Within hours, Industry Minister James Moore responded to a question on twitter about warrantless disclosure by stating that the Privacy Commissioner supports the bill.

9 Comments

  1. We all know this bill has nothing to do with cyber bullying and child porn, it has everything to do with movie and music piracy and Industry pressures to force isp’s to hand over subscriber information. They are just hiding it behind issues that of course everyone wants to stop.

  2. Steve Nixon says:

    Another Tori ‘Trojan’ bill
    You have to watch everything they do.

  3. To judges:

    Accepting IP addresses as an identifier breaks the Internet.

    How? Well, the Internet is about forwarding data until it reaches it’s destination, and proxying that data (and taking on the IP address of the intermediary agent) is normal in today’s Internet (a technique called “network address translation”). This means that an “address” is only a direction, and not a final source or destination since an address could merely be an intermediate and unrelated party to any traffic passing through it.

    This is by design since the Internet is as only robust as the forwarding options available (if one possible route is broken, another route can be taken). Even residential Internet connections can be used this way, and arguably should be used this way to create the most robust network possible.

    By adopting the idea that an IP address specifies the source or destination, and should thus bear responsibility for any data to or from it, we effectively discourage forwarding and, in doing so, we discourage a robust Internet.

    Pick one — but consider that large Internet providers (and governments) have an interest in promoting the idea of one-to-one IP addresses, since they discourage individuals from providing community Internet services, like public hot spots, and requires paying for service; commercial ISPs do not want a robust Internet, only a profitable one.

  4. I can’t remember another government that told so many flat-out, 100% lies – not spin, not putting the best face on it, but outright lies – and doubles down on them when they are exposed. No shame, no honour – and certainly no evidence-based policy!

  5. P. Kay is a Putz
    The position of justice minister under the Conservative Gov. has been occupied by morons. The only thing I find surprising is that P. Kay can actually fit both feet in his mouth. How else do you justify wasting taxpayer resources furthering an agenda that is unconstitutional. It simply smacks of arrogance and ego.

  6. Candid Cameron says:

    Really?
    “It simply smacks of arrogance and ego.”

    Did you honestly expect something else from Generation-X? They were raised to believe the world should revolve around them. If you think they’re bad, just wait until their kids take over.

  7. They will always disregard the supreme court!
    The Supreme Court of Canada has struck down the country’s anti-prostitution laws because it was unconstitutional: It jeopardized the lives of sex trade workers.

    Result: The conservative re-crafting the new law so that all the criminal blame is on the
    customers not the prostitutes, which will inadvertently criminalize prostitution and jeopardize the lives of sex trade workers.

  8. Tom J. Fitzpatrick says:
  9. Stephen Harper doesn’t feel he needs to follow the Law, he abuses it through the executive powers of the PMO.