Last week I appeared before the House of Commons Standing Committee on Access to Information, Privacy and Ethics as part of its review of PIPEDA, Canada’s private sector privacy law. The ETHI study is expected to last several months and may provide the foundation for potential reforms. My opening remarks are posted below:

Wiertz Sebastien - Privacy by Sebastien Wiertz (CC BY 2.0) https://flic.kr/p/ahk6nh
Privacy
What Would a Digital Economy-Era NAFTA Mean for Canada?
U.S. Commerce Secretary Wilbur Ross is expected to file a notice of renegotiation of the North American free trade agreement within weeks, paving the way for talks that could reshape the Canadian economy. It became clear last week that the renegotiation will involve much more than just a few “tweaks”, as a U.S. congressional hearing saw officials trot out the usual laundry list of demands including changes to agricultural supply management, softwood lumber exports, and anti-counterfeiting measures.
Those issues will undoubtedly prove contentious, yet my Globe and Mail article notes that more interesting were comments from Mr. Ross about the need for new NAFTA chapters to reflect the digital economy. The emphasis on digital policies foreshadows a new battleground that will have enormous implications for Canadian privacy laws and digital policies.
Canadian Privacy in the Age of Trump
Last night I appeared on TVO’s The Agenda with Steve Paikin to discuss privacy issues in light of the Trump Executive Order that eliminates Privacy Act protections for non-U.S. citizens or permanent residents. A video of the discussion is embedded below.
Did a Canadian Court Just Establish a New Right to be Forgotten?
The European Union shook up the privacy world in 2014 with the creation of “the right to be forgotten“, creating a system that allows people to seek the removal of search results from Google that are “inadequate, irrelevant or no longer relevant.” The system does not result in the removal of the actual content, but rather makes it more difficult to find in light of the near-universal reliance on search engines to locate information online.
Since the European decision, Google has received nearly 700,000 requests for the removal of links from its search database resulting in the evaluation of 1.8 million URLs. Moreover, privacy authorities in Europe – led by France’s national regulator – have adopted an aggressive approach on the right to be forgotten, ruling that the link removal should be applied on a global basis.
My Globe and Mail op-ed notes that while the Canadian courts have grappled with the question of removing links from the Google search database (a key case on the issue is awaiting a decision from the Supreme Court of Canada), there has been little sense that Canada would establish its own right to be forgotten. That may have changed last week as the Federal Court of Canada issued a landmark ruling that paves the way for a Canadian version of the right to be forgotten that would allow courts to issue orders with the removal of Google search results on a global basis very much in mind.
Trump’s Executive Order Eliminates Privacy Act Protections for Foreigners
President Donald Trump’s Executive Order on domestic safety, released yesterday, has enormous implications for the privacy of everyone living outside the United States. For Canadians, the order should raise significant concerns about government data shared with U.S. authorities as well as the collection of Canadian personal information by U.S. agencies. Given the close integration between U.S. and Canadian agencies – as well as the fact that Canadian Internet traffic frequently traverses into the U.S. – there are serious implications for Canadian privacy. Moreover, the order will raise major concerns in the European Union, creating the possibility of restrictions on data transfers as it seemingly kills the Privacy Shield compromise.
Section 14 of the Executive Order states:
Agencies shall, to the extent consistent with applicable law, ensure that their privacy policies exclude persons who are not United States citizens or lawful permanent residents from the protections of the Privacy Act regarding personally identifiable information.
The protection of Canadian information which ends up in U.S. hands has long been a source of concern. Professor Lisa Austin has written about “constitutional black holes” in which Canadian data is not protected by the Canadian Charter of Rights and Freedoms and the protection afforded to the data in the United States is at a lower standard than for its citizens and permanent residents.