Post Tagged with: "pipeda"

Did you consent to your involvement in this process? by Quinn Dombrowski (CC BY-SA 2.0) https://flic.kr/p/6Ghzp2

Canadian Chamber of Commerce, Canadian Marketing Association Take Aim At Digital Privacy Act’s Consent Provision

The Standing Committee on Industry, Science and Technology continues its hearing on the Digital Privacy Act (Bill S-4) yesterday, with appearances from Privacy Commissioner of Canada Daniel Therrien, the Canadian Chamber of Commerce, and the Canadian Marketing Association. Therrien expressed general support for the bill, but concern with the expanded voluntary disclosure provision.

The Canadian Chamber of Commerce and the Canadian Marketing Association seemed to take the committee by surprise by criticizing a provision in the bill that clarifies what constitutes meaningful consent. The proposed provision states:

6.1 For the purposes of clause 4.3 of Schedule 1, the consent of an individual is only valid if it is reasonable to expect that an individual to whom the organization’s activities are directed would understand the nature, purpose and consequences of the collection, use or disclosure of the personal information to which they are consenting.

That provision should be uncontroversial given that it only describes what most would take to mean consent, namely that the person to whom the activities are directed would understand the consequences of consent. Indeed, Therrien expressed support for the change, noting:

February 18, 2015 — 3 comments — News

Trio by Ian Muttoo (CC BY-NC-SA 2.0) https://flic.kr/p/ij51E8

Why Bell’s Targeted Ad Approach Falls Short on Privacy

In October 2013, Bell announced the launch of a targeted advertising program that uses its customers’ personal information to deliver more “relevant advertising.” The announcement sparked hundreds of complaints with the Privacy Commissioner of Canada and a filing by the Public Interest Advocacy Centre over the same issue with the Canadian Radio-television and Telecommunications Commission.

My weekly technology law column (Toronto Star version, homepage version) notes that nearly a year and a half later, the complaints and filings remain unresolved. The CRTC case has succeeded in placing considerably more information on the public record, however, offering a better perspective on what Bell is doing and why its privacy approach falls short.

February 17, 2015 — 15 comments — Columns

Extremely Urgent by Allan Reyes (CC BY-NC-ND 2.0) https://flic.kr/p/8tEboQ

The Nine Year Wait For Government Urgency on Privacy Reform

The Standing Committee on Industry, Science and Technology started its study on Bill S-4, the PIPEDA reform bill, last week. While news reports suggested that Industry Minister James Moore was open to changes, government MPs warned that any amendments would mean the bill would go back to the Senate for approval and likely die with the fall election. For example, MP Mark Warawa stated:

Minister, if we were to then delay and amend, would S-4 then have to go back to the Senate to get passed? My concern is – this is needed and a vast majority of Canadians want this passed – if we amend it, what’s the chance of it passing in this Parliament? Because, it’s needed.

Moore acknowledged that MPs can suggest reforms, but emphasized that “there is some urgency.”

The government’s sense of urgency with the PIPEDA reform bill is striking given that it has largely stalled progress on the key provisions in this bill for years. In fact, in one instance it left a privacy bill sitting for two years in the House of Commons with no movement whatsoever until it died with prorogation. The historical background behind Bill S-4 is as follows:

February 11, 2015 — 2 comments — News

DSC_0110 Minister of Canadian Heritage and Official Languages James Moore by Heather (CC BY 2.0) https://flic.kr/p/6BbzwP

Why the Digital Privacy Act Will Expand Personal Information Disclosure Without Court Oversight

My column this week on warrantless access to personal information under Canadian law noted that Bill S-4, the Digital Privacy Act, will expand the likelihood warrantless disclosures between private organizations. As I posted recently:

Bill S-4 proposes that:

“an organization may disclose personal information without the knowledge or consent of the individual… if the disclosure is made to another organization and is reasonable for the purposes of investigating a breach of an agreement or a contravention of the laws of Canada or a province that has been, is being or is about to be committed and it is reasonable to expect that disclosure with the knowledge or consent of the individual would compromise the investigation;

Unpack the legalese and you find that organizations will be permitted to disclose personal information without consent (and without a court order) to any organization that is investigating a contractual breach or possible violation of any law. This applies both past breaches or violations as well as potential future violations. Moreover, the disclosure occurs in secret without the knowledge of the affected person (who therefore cannot challenge the disclosure since they are not aware it is happening).

November 4, 2014 — 6 comments — News

Come back with a warrant by Rosalyn Davis (CC BY-NC-SA 2.0) https://flic.kr/p/aoPzWb

Warrantless Access to Subscriber Information: Has the Tide Turned on Canada’s Privacy Embarrassment?

In a year in which privacy issues have captured near weekly headlines, one concern stands out: warrantless access to Internet and telecom subscriber information. From revelations that telecom companies receive over a million requests each year to the Supreme Court of Canada’s landmark decision affirming that there is a reasonable expectation of privacy in subscriber information, longstanding law enforcement and telecom company practices have been placed under the microscope for the first time.

Last week, the Privacy Commissioner of Canada released a report that shed further light on the law enforcement side of warrantless disclosure requests, raising disturbing questions about the lack of record keeping and politically motivated efforts to drum up data on the issue.

My weekly technology law column (Toronto Star version, homepage version) notes that the Office of the Privacy Commissioner of Canada notified the Royal Canadian Mounted Police last October that it was planning to conduct preliminary investigative work on the collection of warrantless subscriber information from telecom companies. The plan was to assess RCMP policies and to determine the frequency and justification for warrantless requests.

November 3, 2014 — 5 comments — Columns