PATRIOT ACT – PrivaSecTech https://privasectech.com/ Wed, 13 Nov 2019 18:34:17 +0000 en-US hourly 1 https://wordpress.org/?v=5.4.2 Stop online spying in Canada https://privasectech.com/stop-online-spying-in-canada/ Wed, 22 Jun 2011 18:11:02 +0000 http://privasectech.com/?p=137 Continue reading Stop online spying in Canada]]> You may remember a year ago I broke the story on the introduction of the minority government’s Canadian version of the patriot act (see articles one and two). As promised, the now majority government has promised to push these through as well as others as part of an omnibus bill. My friends at openmedia.ca have started a campaign to stop online spying, not to mention you the consumer paying for it. You can sign the petition here to stop this before it passes.

]]>
Canadian Patriot Act redux https://privasectech.com/canadian-patriot-act-redux/ Wed, 18 Aug 2010 15:06:40 +0000 http://privasectech.com/?p=32 Continue reading Canadian Patriot Act redux]]>

The article posted in May on the Canadian Patriot Act being introduced to the House of Commons didn’t seem to go much further than “preaching to the choir”. I will try to summarize the changes, which will hopefully show you how Canada’s privacy landscape went from one of the top 2 in the world, to near the bottom, in this single change to legislation.

While you may have read about the other changes to PIPEDA at the end of May, the following changes were conveniently left to the end of the document, and most people didn’t make it that far. In fact, I don’t believe I’ve seen any mainstream media report on these drastic and impacting changes to the privacy of all Canadians.

  • a new provision allowing the disclosure of personal information without consent for private sector investigations and fraud prevention will replace a regulatory process that has been burdensome for small and medium-size organizations.

Your personal information is no longer only provided to law enforcement for investigations, businesses can now provide your information to any company claiming to do investigations or fraud prevention. As one of the top privacy and security investigative organizations in British Columbia as of writing this, we don’t want to see those organizations have such sweeping access to your information!

  • amendments would make it clear that organizations may collaborate with government institutions, such as law enforcement and security agencies that have requested personal information, in the absence of a warrant, subpoena, or order.

This is a major change. No longer do law enforcement or security agencies require a warrant, subpoena or order to request, to receive your personal information, from any business in Canada!

  • new provisions would prohibit organizations from notifying an individual about the disclosure of their personal information to law enforcement and security agencies where the government institution to whom the information was disclosed objects.

In case you didn’t think these changes were significant enough, companies that have provided your personal information are no longer permitted to tell you that they have provided your information to law enforcement or any security agency if those agencies object to that disclosure.

What should you do if you’re upset with these changes? Contact your MP, and write them as well as your local media. These changes, contained in Bill 29, have only had first reading, and it’s not too late for changes.

Industry Canada press release
Bill C-29 @ parl.gc.ca

Status of the Bill

]]>
Canadian Patriot Act introduced https://privasectech.com/canadian-patriot-act-introduced/ Tue, 25 May 2010 23:50:14 +0000 http://privasectech.com/?p=13 Continue reading Canadian Patriot Act introduced]]>

Today a couple of changes to Canada’s privacy landscape were introduced under the infamous banner of “safety and security”. This will create significant changes to PIPEDA and FISA, Canada’s legislation around private sector privacy and spam respectively. I’ve been asked what this means, so I will try to summarize:

The changes introduced today to PIPEDA propose:

  • if your organization is breached, you will notify the federal privacy commissioner as well as individuals where there is a risk of harm.
  • a requirement that organizations to consider the ability of their target audience to comprehend the consequences of sharing their personal information. (It mentions children and the vulnerable, but no technical details on how this requirement would be implemented)
  • exceptions to allow for the release of personal information to help protect victims of financial abuse, to help locate missing persons and to identify injured, ill or deceased individuals (again, no details on technical implementation).
  • exceptions to consent for the collection, use and disclosure of information needed for, among others, managing the employment relationship, information produced for work purposes (“work product”), and information used for due diligence in business transactions.
  • organizations will also be able to share and use business contact information that is required to conduct day-to-day business.
  • a new provision allowing the disclosure of personal information without consent for private sector investigations and fraud prevention will replace a regulatory process that has been burdensome for small and medium-size organizations.
  • amendments would make it clear that organizations may collaborate with government institutions, such as law enforcement and security agencies that have requested personal information, in the absence of a warrant, subpoena, or order.
  • new provisions would prohibit organizations from notifying an individual about the disclosure of their personal information to law enforcement and security agencies where the government institution to whom the information was disclosed objects.

Today the Fighting Internet and Wireless Spam Act (FISA) was also reintroduced, which is anti-spam legislation. For more information, see the Marketwire press release

]]>