Wiertz Sebastien - Privacy by Sebastien Wiertz (CC BY 2.0) https://flic.kr/p/ahk6nh

Privacy

MSFT and the Ontario IPC Office

The Office of the Ontario Privacy Commissioner has long been a world leader in privacy advocacy, displaying a remarkable ability to anticipate the privacy impact of cutting-edge technologies. Given its track record, the attention being lavished on the release of a new document on identity management is much deserved as it merits wide reading. The Seven Laws of Identity builds on work being done by Microsoft designed to allow Internet users to better manage their online "identities" by limiting the disclosure of personal information ("data minimization"), using better authentication practices, and building in user consent and controls. In recent news reports, the Office has touted the virtues of its Seven Laws of Identity approach, with claims that it will help solve Internet ills such as phishing, pharming, and spam.

As I read the coverage and white paper, I am left somewhat uncomfortable.

October 19, 2006 — 4 comments — News

ICANN Sacrifices Privacy for Shot at Independence

My weekly Law Bytes column (Toronto Star version, BBC version, homepage version) examines the recent agreement between ICANN and the U.S. government. Late last month, ICANN took a major step toward addressing some ongoing concerns by signing a new agreement with the U.S. government entitled the Joint Project Agreement. ICANN immediately heralded the JPA as a "dramatic step forward" for full management of the Internet's domain name system through a "multi-stakeholder model of consultation." It added that the agreement grants it unprecedented independence by removing many of the U.S. government’s oversight controls. These include the elimination of a twice-annual reporting requirement to the U.S. Department of Commerce (ICANN will instead release a single annual report targeted to the full Internet community) and a shift away from the highly prescriptive policy responsibilities featured in the original ICANN contract.

While the JPA may indeed represent an important change, a closer examination of its terms suggest that there may be a hidden price tag behind ICANN newfound path toward independence – the privacy of domain name registrants.

October 9, 2006 — Comments are Disabled — Columns

ICANN Sacrifices Privacy for Shot at Independence

Appeared in the Toronto Star on October 9, 2006 as Web's Naming Body Barters Away Privacy Appeared in the BBC on October 10, 2006 as Internet Privacy 'Sacrified" By ICANN Internet governance has attracted increasing attention in recent years as governments, business communities, and Internet users struggle to develop a […]

October 9, 2006 — 2 comments — Columns Archive

The ISP Privacy Pledge

The ISP Privacy Pledge, an initiative from CIPPIC and Online Rights Canada, has generated some interesting debate this week. Mark Goldberg criticizes the pledge, arguing that it encourages ISPs to look the other way as part of police investigations, fails to address corporate abuses of personal information, and supports a "digital exemption" to laws and justice. I think that Alec Saunders does a great job of rebutting Goldberg's position by focusing on the potential for law enforcement abuse, but I wanted to add two additional comments.

October 5, 2006 — 5 comments — News

Sony Hit With Privacy and Consumer Protection Complaints

As Sony seeks court approval of its class action settlement today (word is that the judge took note of the objections to the settlement and asked the parties to go back and try to address the concerns, likely leading to some modest amendments), CIPPIC has filed an avalanche of complaints […]

September 21, 2006 — 1 comment — News