Michael Geist wonders why the Canadian government doesn’t seem to care at all about the privacy of Canadians:
Over the past several weeks, there have been several important privacy developments in Canada including troubling privacy practices at well-known organizations such as the CBC and Tim Hortons, a call from business organizations for privacy reform, the nomination of a new privacy commissioner with little privacy experience, and a decision by a Senate committee to effectively overrule the government on border privacy rules. These developments raise the puzzling question of why the federal government – led by Innovation, Science and Industry Minister François-Philippe Champagne, Public Safety Minister Marco Mendicino, and Canadian Heritage Minister Pablo Rodriguez – are so indifferent to privacy, at best treating it as a low priority issue and at worst proposing dangerous measures or seemingly hoping to cash in on weak privacy laws in order to fund other policy priorities.
The privacy alarm bells have been ringing for weeks. For example, the Globe and Mail recently featured an important story on children’s privacy, working with Human Rights Watch and other media organizations to examine the privacy practices of dozens of online education platforms. The preliminary data suggests some major concerns in Canada, most notably with the CBC, whose CBC Kids platform is said to be “one of the most egregious cases in Canada and really all around the world”. The CBC responded that it “complies with relevant Canadian laws and regulations with regard to online privacy, and follows industry practices in audience analytics and privacy protection”. Yet that is the problem: Canada’s privacy laws are universally regarded as outdated and weak, thereby enabling privacy invasive practices with no consequences. Soon after, the Privacy Commissioner of Canada released findings in an investigation involving the Tim Hortons app tracking location data. First identified by then-National Post reporter James McLeod, the commissioner found privacy violations, yet Canadian privacy law does not include penalties for these violations.
Despite the obvious need for privacy reform – outgoing Privacy Commissioner of Canada Daniel Therrien reiterated the necessity for reform in his final speech as commissioner and business groups have made a similar call for privacy reform – the government seems indifferent to the issue. The nomination of Philippe Dufresne as the new privacy commissioner is a case in point. I don’t know Mr. Dufresne and I’m hoping that he proves to be a great commissioner. He certainly said many of the right things in his appearance before committee yesterday. However, the government’s choice is instructive. In choosing someone with no obvious privacy experience, the government sided instead with government managerial experience. Good managerial experience is valuable, but a career spent within government is not a training ground for pushing the policy envelope, pressuring governments to reform the law, and demanding that the private sector comply with it. The Dufresne choice signals that the government may be more comfortable with a well-managed agent of Parliament than with an agent of change.
