Wiertz Sebastien - Privacy by Sebastien Wiertz (CC BY 2.0) https://flic.kr/p/ahk6nh

Wiertz Sebastien - Privacy by Sebastien Wiertz (CC BY 2.0) https://flic.kr/p/ahk6nh

Privacy

Passport Canada Suffers Massive Privacy Breach

The Globe and Mail reports that Passport Canada has suffered a massive privacy breach that resulted in online availability of applicant information. I argue that this again highlights the need for mandatory security breach notification legislation. Update: The incident is raised during Question Period on the floor of the House […]

Read more ›

December 4, 2007 Comments are Disabled News

Private Email Not Always Hush Hush

My weekly technology law column (Toronto Star version, The Tyee version, Ottawa Citizen version, homepage version) begins by recounting that this past September, the U.S. Drug Enforcement Agency launched "Operation Raw Deal", an initiative that targeted people purchasing raw steroid materials through the Internet from China and repackaging the steroids as drugs for domestic sale.  Tyler Strumbo, a 23-year old California resident, was among the 124 people arrested. The Strumbo case is of particular interest because of an important Canadian connection. The foundation of the DEA's case rested on hundreds of encrypted emails stored on the computer servers of Hush Communications, a company based in Vancouver.  A British Columbia court ordered the company to decrypt the emails and to send them to the U.S. law enforcement officials.  Faced with a valid court order, the company complied, shipping 12 CDs filled with unencrypted personal email to investigators in California.

Read more ›

November 27, 2007 6 comments Columns

Private Email Not Always Hush Hush

Appeared in the Toronto Star on November 26, 2007 as Private Email Is Not Always Hush Hush Appeared in the Tyee on November 27, 2007 as Private E-mail Not Hush Hush This past September, the U.S. Drug Enforcement Agency launched "Operation Raw Deal", an initiative that targeted people purchasing raw […]

Read more ›

November 26, 2007 Comments are Disabled Columns Archive

Canada’s Identity Theft Bill: What It Says and What’s Missing

The federal government yesterday introduced much-needed identity theft legislation.  Bill C-27 includes several important provisions focusing on identity theft such as trafficking in documents and identity information.  Key provisions include: making, possessing, transferring, or selling "identity documents" of another person becomes an offence punishable with up to five years in […]

Read more ›

November 22, 2007 5 comments News

The Data Game

The CBC's The National featured a lengthy story by Keith Boag this evening on the collection and use of personal information by Canada's political parties. I was interviewed for the story, which highlights the use of detailed databanks with virtually no legal oversight. The story appears about midway through the […]

Read more ›

November 21, 2007 1 comment News