Advertisement

New privacy bill won’t fix Canada’s longstanding issues, critics say

Click to play video: 'Blair defends bill criticized by privacy czar amid facial recognition concerns'
Blair defends bill criticized by privacy czar amid facial recognition concerns
NDP ethics critic Charlie Angus pushed the government on why it is not addressing flaws in C-11, a bill to amend privacy laws, which the privacy commissioner has said does not do enough to prevent Canadians' privacy from being violated through the use of facial recognition technology – May 11, 2021

Canada’s existing privacy laws leave consumers and businesses exposed to misuses of data, mainly due to outdated rules and lack of enforcement ability for regulators, privacy commissioners and experts say, and a proposed new bill does not necessarily solve these issues.

Prime Minister Justin Trudeau’s Liberal government introduced Bill C-11 in November 2020, intended to modernize the oversight of data protection, but critics say it falls short of this goal. The bill has several hoops to pass through before it becomes law.

Canada’s data privacy laws saw a significant update roughly 20 years ago.

Changing technology – such as facial recognition and increased use of artificial intelligence – combined with a lack of enforcement power have “absolutely” left Canadians unprotected from data leaks and misuse, according to Jill Clayton, Alberta’s privacy commissioner.

Story continues below advertisement

The dearth of action means that Canada is “seriously starting to fall behind” jurisdictions like Europe, which implemented a landmark set of privacy laws in 2018, Clayton said.

Click to play video: 'Privacy watchdogs call on provincial governments to beef up their laws'
Privacy watchdogs call on provincial governments to beef up their laws

In the United Kingdom, for instance, regulators have more enforcement powers, such as carrying out FBI-style raids, while Canadian regulators are often unable to deliver more than a slap on the wrist.

Get the day's top news, political, economic, and current affairs headlines, delivered to your inbox once a day.

Get daily National news

Get the day's top news, political, economic, and current affairs headlines, delivered to your inbox once a day.
By providing your email address, you have read and agree to Global News' Terms and Conditions and Privacy Policy.

The lack of enforcement power was highlighted earlier this year, when Daniel Therrien, current federal privacy commissioner, issued a joint report with provincial counterparts into U.S. facial recognition Clearview AI’s actions in Canada.

The commissioners condemned the company’s practice of using Canadians’ photos posted to social media to build a database, but could not force the company to return or delete the data.

Story continues below advertisement

Similarly, when sensitive information of 15 million Canadians was leaked at LifeLabs, Canada’s largest provider of specialty medical laboratory testing, commissioners said they were limited in their ability to hand out appropriate punishment.

One outcome of Canada’s outdated privacy law is that industries that handle a lot of data, such as banks, have had to evolve ahead of the legislation due to the increasing gap between modern technologies and existing laws, said Robert Colangelo, senior vice president of the global financial institutions group at DBRS Morningstar.

To strengthen Bill C-11, Therrien’s office submitted 60 recommendations to the government, including a shift in focus towards privacy rights of individuals and away from prioritizing commercial interests.

A spokesman for Innovation, Science and Industry Minister Francois-Philippe Champagne said the bill provides a clear framework of rules that allow “Canadian businesses to innovate while protecting Canadians’ privacy,” and its passage is “a top priority.”

The bill also proposes companies that fail to protect the personal information of Canadians could be fined up to 5% of global revenue. Therrien said in a recent statement said that the penalty is “unjustifiably narrow and protracted.”

David Fraser, a lawyer at McInnes Cooper who advises Fortune-100 companies on technology and privacy laws, acknowledges that Bill C-11 is a compromise, but is concerned the bill would make the privacy commissioner “judge, jury and executioner.”

Story continues below advertisement

“There’s something in there to disappoint everybody,” Fraser said.

Sponsored content

AdChoices