Post Tagged with: "warrantless disclosure"

Wiertz Sebastien - Privacy by Sebastien Wiertz (CC BY 2.0) https://flic.kr/p/ahk6nh

Government Rejects Supreme Court Privacy Decision: Claims Ruling Has No Effect on Privacy Reform

Having had the benefit of a few days to consider the implications of the Supreme Court of Canada decision in Spencer, the Senate last night proceeded to ignore the court and pass Bill S-4, the Digital Privacy Act, unchanged. The bill extends the ability to disclose subscriber information without a warrant from law enforcement to any private sector organizations by including a provision that allows organizations to disclose personal information without consent (and without a court order) to any organization that is investigating a contractual breach or possible violation of any law. Given the Spencer decision, it seems unlikely that organizations will voluntarily disclose such information as they would face the prospect of complaints for violations of PIPEDA.

Despite a strong ruling from the Supreme Court of Canada that explicitly rejected the very foundation of the government’s arguments for voluntary warrantless disclosure, the government’s response is “the decision has no effect whatsoever on Bill S-4.”

June 17, 2014 — 11 comments — News

Interview Discussing Spencer Ruling: No More Voluntary Disclosure

I talked to Rob Breakenridge on his show on News Talk 770 to about the Supreme Court of Canada’s landmark ruling in Spencer where it eviscerated voluntary disclosure of internet subscriber data.

June 13, 2014 — Comments are Disabled — News Interviews, Tv / Radio

The Expansion of Warrantless Disclosure Under S-4: Government’s Response Fails to Reassure

My post and column on the expansion of warrantless disclosure under Bill S-4, the misleadingly named Digital Privacy Act, has attracted some attention and a response from Industry Canada. The department told iPolitics:

“Companies who share personal information are required to comply with the rules to ensure that information is only disclosed for the purpose of conducting an investigation into a contravention of a law or breach of an agreement. For example, self-regulating professional associations, such as a provincial law society, may wish to investigate allegations of malpractice made by a client. When organizations are sharing private information, the Privacy Commissioner can investigate violations and may take legal action against companies who do not follow the rules. This is consistent with privacy laws in British Columbia and Alberta and was recommended by the Standing Committee Access to Information, Privacy and Ethics.”

The response may sound reassuring, but it shouldn’t be.

April 14, 2014 — 6 comments — News

Why the Digital Privacy Act Undermines Our Privacy: Bill S-4 Risks Widespread Warrantless Disclosure

Earlier this week, the government introduced the Digital Privacy Act (Bill S-4), the latest attempt to update Canada’s private sector privacy law. The bill is the third try at privacy reform stemming from the 2006 PIPEDA review, with the prior two bills languishing for months before dying due to elections or prorogation.

The initial focus has unsurprisingly centered on the new security breach disclosure requirements that would require organizations to disclose breaches that puts Canadians at risk for identity theft. Security breach disclosure rules are well-established in other countries and long overdue for Canada. The bill fixes an obvious shortcoming from the earlier bills by adding some teeth to the disclosure requirements with the addition of penalties for violations of the law. Moreover, Bill S-4 stops short of granting the Privacy Commissioner full order making power as is found at the provincial level, but the creation of compliance orders has some promise of holding organizations to account where violations occur.

Despite those positive proposed changes to Canadian privacy law, the bill also includes a provision that could massively expand warrantless disclosure of personal information.

April 10, 2014 — 41 comments — News

Bill C-30’s “Voluntary” Warrantless Disclosure Provision

The debate over Bill C-30, the online surveillance bill, has thus far focused on the mandatory disclosure of subscriber information, including name, address, email address, and IP address. The provision represents a significant change in the law, which currently allows ISPs to disclose such information but does not require them to do so. In response to the criticism, Public Safety Minister Vic Toews has emphasized that the content of emails or web surfing habits would still require a warrant.

Yet Toews has not talked about a provision in Bill C-30 that creates a voluntary warrantless system that would allow police to ask for the content of emails or web surfing habits and allow ISPs to comply with the request without fear of liability. Section 487.0195 states the following:

February 20, 2012 — 27 comments — News