Privacy protections outdated, says watchdog

Federal commissioner outlined concerns in a memo to the prime minister

OTTAWA— Canada’s privacy watchdog has warned Prime Minister Justin Trudeau that federal privacy protections are “ill-suited” for the 21st century.

In a letter obtained by the Star, Privacy Commissioner Daniel Therrien told Trudeau the rules around government’s handling of private information has not kept up with technological advances or society’s expectations.

The Privacy Act, which governs how the federal government uses Canadians’ personal information, has not been substantially changed since it was introduced in 1983.

When the law was introduced, most government business was conducted on paper. Now, government departments and agencies increasingly hold vast sums of information electronically — bringing a new set of issues, challenges and vulnerabilities.

“One of the biggest changes in the privacy realm is technology, Canadians’ relationship to it, and the desires by government and industry to harness its power for various purposes,” Therrien wrote in a Nov. 10 letter, obtained under access to information law.

“In this complex, new environment, modernization of our privacy framework and the pressing need for greater transparency around how technology is used is critical to maintaining citizens’ trust in government and the digital economy.”

The Star requested an interview with Therrien but he was unavailable.

This isn’t the first time the issue has been raised with Parliamentarians. In a March 22 letter to the House of Commons committee on privacy issues, Therrien provided 16 recommendations to modernize the Privacy Act — and warned that the legislation is becoming increasingly irrelevant.

“Without renewal, the protections of the Act are proving to be increasingly out of touch with Canadians and their engagement with the digital world,” Therrien wrote.

“Government operates in a radically transformed environment when compared with 1983. Canadians have come to expect more openness and transparency about how their personal information will be used by government, with whom it will be shared, and how it will be protected.”

As part of their campaign platform last year, the Liberals pledged to update the Access to Information Act — also introduced in1983 — and to man- date a five-year review of the legislation so it doesn’t become so badly out of date again.

Therrien is arguing for many of the same powers the Liberals are granting Information Commissioner Suzanne Legault: the power to compel departments to comply with recommendations; a mandatory five-year review of the Privacy Act, and extending the mandate to apply to all government institutions, including ministers’ offices and the Prime Minister’s Office.

While the sorry state of access to information law has been widely reported, however, the problems with the Privacy Act have flown largely under the radar.

A spokesman for the Prime Minister’s Office said that they value the feedback from the commissioner and hope to build on it over the course of their four-year mandate.

“The issue remains a priority for the government because we take the privacy of Canadians very seriously, and are committed to working with the commissioner on an active and ongoing basis,” Cameron Ahmad wrote in an email.

“The minister of justice is currently reviewing the commissioner’s recommendations and proposals.”