Appeared in the Toronto Star on June 30, 2008 as CIRA's 'whois' Policy a Stunning Setback for Privacy Two months ago, I wrote a glowing review of the Canadian Internet Registration Authority's new "whois" policy that was supposed to better protect the privacy of hundreds of thousands of Canadians. The […]

Wiertz Sebastien - Privacy by Sebastien Wiertz (CC BY 2.0) https://flic.kr/p/ahk6nh
Privacy
Privacy Commissioner of Canada Blogging on C-61
The Office of the Privacy Commissioner of Canada has posted two entries on the C-61, noting the privacy implications of the bill.
CIRA Creates Backdoor WHOIS Exceptions for Police and IP Owners
Earlier this year, I wrote glowingly about the new CIRA whois policy, which took effect today and which I described as striking the right balance between access and privacy. The policy was to have provided new privacy protection to individual registrants – hundreds of thousands of Canadians – by removing the public disclosure of their personal contact information (though the information is collected and stored by domain name registrars).
Apparently I spoke too soon. Faced with the prospect of a privacy balance, special interests representing law enforcement and trademark holders quietly pressured CIRA to create a backdoor that will enable these two groups (and these two groups alone) to have special access to registrant information. In the case of law enforcement, police can bring cases to CIRA involving immediate risk to children or the Internet (ie. denial-of-service attacks) and CIRA will hand over registrant information without court oversight. In the case of trademark holders (as well as copyright and patent owners), claims that a domain name infringes their rights will be enough to allow CIRA to again disclose registrant information.
This represents a stunning about-face after years of public consultation on the whois policy.
CIPPIC Launches Privacy Complaint Against Facebook
Students at the University of Ottawa's Canadian Internet Policy and Public Interest Clinic have filed a privacy complaint against Facebook. The complaint alleges 22 violations of Canada's national privacy law.
BC Privacy Commissioner Says 41 Days Too Long for Breach Notification
All About Information notes a recent B.C. Privacy Commissioner decision which ruled that 41 days is too long to notify affected individuals of a security breach.