On August 22, 2016, the Office of the Privacy Commissioner of Canada (OPC) released an important joint investigation report regarding the Ashley Madison data breach, which exposed the personal information of some 32 million users of the online dating website marketed to people who are married or in committed relationships. As part of its investigation, […] Read more
The Future of Privacy Forum (FPF) announced yesterday the release of its Best Practices for Consumer Wearables and Wellness Apps and Devices, a detailed set of guidelines that responsible companies can follow to ensure they provide practical privacy protections for consumer-generated health and wellness data. I have been following these guidelines very closely over the last few […] Read more
The CRTC has recently released a Notice for businesses and individuals advising them on how to keep records of consent. The CRTC confirms that under section 13 of CASL, the onus is on the person who alleges they have consent to send a CEM (typically, the person who sends the CEM) to prove that they have proper consent, either implied […] Read more
The Office of the Privacy Commissioner (OPC) has recently published a great discussion paper entitled “Consent and privacy” exploring potential enhancements to consent under PIPEDA. The OPC also launched a Consultation and Call for Submissions requesting input on its consent paper, asking whether legislative changes are required, and requesting comments on solutions which would be helpful in […] Read more
Quebec was the first province to enact a data protection law for the private sector, an Act respecting the protection of personal information in the private sector in 1993. This law is substantially similar to the federal law PIPEDA. The Quebec Commission d’Accès à l’Information (CAI), the government body responsible for the administration and enforcement of the Quebec law, […] Read more
A few days ago, I published a short piece on Big Data Analytics: Is Consent Required? While I discuss different data flow scenarios and whether consent should be a requirement under each scenario, I don’t address the consent exception for research purposes. This exception which can be found under each Canadian private sector data protection law is […] Read more
The Office of the Privacy Commissioner of Canada recently chose to make reputation and privacy one of its priorities for the next five years and has launched a consultation in which it asks if there is a way to apply a “right to be forgotten” in Canada. This is the “right” famously coined by the […] Read more
Geneviève Béchard, Étudiante au cours DRT6929E-A Un communiqué publié le 11 avril par le Commissariat à la protection de la vie privée du Canada nous apprend que le ratissage international 2016 en matière de vie privée, qui à lieu ces jours-ci sous l’initiative du Global Privacy Enforcement Network (GPEN), a pour thème « L’Internet des objets ». […] Read more
Roxane Fortin Lecompte, Étudiante au cours de DRT-6929E Entre le 1er mai 2015 et le 31 mars 2016, 100 agents du service de police de Toronto ont mis à l’essai le port de caméras sur leur uniforme dans le cadre d’un projet pilote ayant coûté 500 000$. L’évaluation du projet se terminera le 30 juin et le service […] Read more
I am delighted to be participating at the Canadian Privacy Summit 2016 taking place in Vancouver on April 13 and 14. This two-day summit is designed for top experts and key stakeholders in the Canadian and privacy communities, and across diverse sectors in Canada, to assess the latest developments and tackle the tough privacy issues […] Read more