I appeared on CBC News to discuss the internet protest against proposed U.S. anti-piracy legislation, SOPA. Watch my interview on Youtube or on CBC’s website, for better quality.

Wiertz Sebastien - Privacy by Sebastien Wiertz (CC BY 2.0) https://flic.kr/p/ahk6nh
Privacy
Why Canadians Should Participate in the SOPA/PIPA Protest
First, the SOPA provisions are designed to have an extra-territorial effect that manifests itself particularly strongly in Canada. As I discussed in a column last year, SOPA treats all dot-com, dot-net, and dot-org domain as domestic domain names for U.S. law purposes. Moreover, it defines “domestic Internet protocol addresses” – the numeric strings that constitute the actual address of a website or Internet connection – as “an Internet Protocol address for which the corresponding Internet Protocol allocation entity is located within a judicial district of the United States.” Yet IP addresses are allocated by regional organizations, not national ones. The allocation entity located in the U.S. is called ARIN, the American Registry for Internet Numbers. Its territory includes the U.S., Canada, and 20 Caribbean nations. This bill treats all IP addresses in this region as domestic for U.S. law purposes. To put this is context, every Canadian Internet provider relies on ARIN for its block of IP addresses. In fact, ARIN even allocates the block of IP addresses used by federal and provincial governments. The U.S. bill would treat them all as domestic for U.S. law purposes.
Second, Canadian businesses and websites could easily find themselves targeted by SOPA. The bill grants the U.S. “in rem” jurisdiction over any website that does not have a domestic jurisdictional connection. For those sites, the U.S. grants jurisdiction over the property of the site and opens the door to court orders requiring Internet providers to block the site and Internet search engines to stop linking to it. Should a Canadian website owner wish to challenge the court order, U.S. law asserts itself in another way, since in order for an owner to file a challenge (described as a “counter notification”), the owner must first consent to the jurisdiction of the U.S. courts.
Are Canada’s Digital Laws Unconstitutional?
While a federal e-commerce law may have been preferable, the constitutional division of powers meant that it fell to the provinces to enact those laws.
The provinces took the lead on e-commerce legislation in the late 1990s, but over the past decade it has been the federal government that has led on most other digital rules, including privacy legislation, the anti-spam statute, and proposed digital copyright reform. Those efforts are now in constitutional limbo following the Supreme Court of Canada’s recent ruling that plans to create a single securities regulator are unconstitutional.
The December securities regulator decision concluded that the national approach to securities regulation stretches the federal trade and commerce clause too far into provincial jurisdiction. The court ruled that most of the securities regulatory activities deal with day-to-day contractual regulation within the provinces and that “these matters remain essentially provincial concerns falling within property and civil rights in the provinces and are not related to trade as a whole.”
My weekly technology law column (Toronto Star version, homepage version) notes the repercussions of that decision may be felt far beyond just securities regulation. For example, federal privacy law may now be particularly vulnerable to challenge since it relies on the same trade and commerce provision.
Are Canada’s Digital Laws Unconstitutional?
Appeared in the Toronto Star on January 8, 2012 as Are Canada’s Digital Laws Unconstitutional? One of the first Canadian digital-era laws was the Uniform Electronic Commerce Act, a model law created by the Uniform Law Conference of Canada in the late 1990s. The ULCC brings together officials from federal, […]
PIAC Report Says Bill C-12 Data Breach Rules Should Be Toughened
PIAC has released a new report that examines the mandatory data breach reporting requirements in Bill C-12 and concludes that changes are needed to provide adequate privacy protection.