Privacy watchdog takes Facebook to court
OTTAWA — Canada’s privacy czar is taking Facebook to court after finding the socialmedia giant’s lax practices allowed personal information to be used for political purposes.
A long-awaited joint report from privacy commissioner Daniel Therrien and his British Columbia counterpart, Michael McEvoy, uncovered major shortcomings in Facebook’s procedures and called for stronger laws to protect Canadians.
The commissioners expressed dismay Thursday that Facebook had rebuffed their findings and recommendations.
“It is completely unacceptable,” Therrien told a news conference, lamenting his office’s lack of enforcement powers. “I cannot, as a regulator, insist that they act responsibly.”
Facebook insisted Thursday that it took the investigation seriously, engaging in months of good-faith co-operation and lengthy negotiations, as well as offering to enter into a compliance agreement with Therrien’s office.
The probe followed reports that Facebook let an outside organization use an app to access users’ personal information, and that some of the data was then passed to others. Recipients of the information included the firm Cambridge Analytica, which was involved in U.S. political campaigns.
The app, at one point known as This is Your Digital Life, encouraged users to complete a personality quiz but collected much more information about the people who installed the app as well as data about their Facebook friends, the commissioners said.
About 300,000 Facebook users worldwide added the app, leading to the potential disclosure of the personal information of approximately 87 million others, including more than 600,000 Canadians, the report said.
The commissioners concluded that Facebook broke Canada’s privacy law governing companies by failing to obtain valid and meaningful consent of installing users and their friends, and that it had “inadequate safeguards” to protect user information.
Despite its public acknowledgment of a “major breach of trust” in the Cambridge Analytica scandal, Facebook disputes the report’s findings and refuses to implement recommendations, the commissioners said.
“Facebook’s refusal to act responsibly is deeply troubling given the vast amount of sensitive information people have entrusted to this company,” Therrien said. “The company’s privacy framework was empty.”
McEvoy said Facebook has often expressed a commitment to protecting personal information, but when it comes to taking concrete actions to fix transgressions, “they demonstrate disregard.”
The stark contradiction between Facebook’s public promises to mend its ways on privacy and its refusal to address the deficiencies – or even acknowledge that it broke the law – is extremely concerning, Therrien said.
“Facebook should not get to decide what Canadian privacy law does or does not require.”
Therrien’s office plans to ask the Federal Court to force Facebook to take action.
Therrien reiterated his long-standing call for the federal government to give him authority to issue binding orders to companies and levy fines for non-compliance with the law. In addition, he wants powers to inspect the practices of organizations.
Erin Taylor, communications manager for Facebook Canada, said the company was disappointed Therrien considers the issues from the probe unresolved.
“There’s no evidence that Canadians’ data was shared with Cambridge Analytica, and we’ve made dramatic improvements to our platform to protect people’s personal information,” Taylor said.