Privacy Commissioner releases report on online tracking, profiling and targeting, and cloud computing

May 6, 2011

Canada’s Privacy Commissioner has just released the final report of her Office’s consultations on the online tracking, profiling and targeting of consumers by marketers and other businesses. “Most people have no idea about the rich trail of data they leave behind when they browse the Internet, use social networking sites, or engage the geo-location functions of their mobile devices,” the Commissioner observed.  Organizations that track the online activities of Canadians must be more upfront about their practices, Privacy Commissioner Jennifer Stoddart has concluded… “it comes down to meaningful consent, which entails informed consent”.


Buses, bingo and bins – and the need for privacy to be designed

January 21, 2011

Buses, bingo and bins. Probably not the first things that come to your mind when you think of privacy.

Yet in recent days, privacy issues have impacted school buses, casinos and garbage bins. This may seem odd when most privacy news stories these days deal with Facebook and other websites. But the world of privacy is increasingly affecting just about every segment of society. Read more>>


Supreme Court of Canada releases electric meter privacy decision

November 24, 2010

The Supreme Court of Canada (SCC) released an important decision today that considered whether an individual home owner had a reasonable expectation of privacy in electric meter data.

The police had asked a local utility company to attach a digital recording ammeter (DRA) to the electric meter on a home in order to monitor electrical usage. The data gleaned from the DRA and from other sources was then used to obtain a warrant to search the home. The search resulted in exposing a marijuana grow op. The defence argued that the installation of the DRA infringed the privacy rights of the accused to be secure against unreasonable search contained in Canada’s Charter of Rights and Freedoms.

A critical factual consideration, on which much of the disagreement in the case turned, was the degree to which the use of DRA technology reveals private information. The SCC ultimately decided that DRA technology merely indicates electricity use, not what the electricity was used for, so it was a reasonable loss of privacy.

Here’s an excerpt from the decision:

The central issue in this case is thus whether the DRA discloses intimate details of the lifestyle and personal choices of the individual that form part of the biographical core data protected by the Charter’s guarantee of informational privacy.  The evidence available on the record offers no foundation for concluding that the information disclosed by the utility company yielded any useful information at all about household activities of an intimate or private nature that form part of the inhabitants’ biographical core data.  The DRA’s capabilities depend of course on the state of the technology at the time of its use.  As DRA technology now stands, it is not capable of giving access to the occupants’ personal information.  Instead, the DRA data merely yield an additional piece of information to evaluate suspicions — based on an independent evidentiary foundation — police already have about a particular activity taking place in the home.

A final factor affecting the informational privacy analysis is the fact that G’s interest in the electricity use data was not exclusive.  G’s electricity consumption history was not confidential or private information which he had entrusted to the utility company.  As the supplier of electricity, the utility company had a legitimate interest of its own in the quantity of electricity its customers consumed.  Consequently, it is beyond dispute that the utility company was within its rights to install a DRA on a customer’s line on its own initiative to measure the electricity being consumed.  The utility company was not an interloper exploiting its access to private information to circumvent the Charter at the behest of the state; rather, its role is limited to the wholly voluntary cooperation of a potential crime victim.

While a territorial privacy interest involving the home is a relevant aspect of the totality of the circumstances informing the reasonable expectation of privacy determination, the Charter’s protection of territorial privacy in the home is not absolute.  Where, as in the case at bar, there was no direct search of the home itself, the informational privacy interest should be the focal point of the analysis.  The fact that the home was the focus of an otherwise non-invasive and unintrusive search should be subsidiary to what the investigative technique was capable of revealing about the home and what information was actually disclosed.  The fact that the search includes a territorial privacy aspect involving the home should not be allowed to inflate the actual impact of the search to a point where it bears disproportionately on the expectation of privacy analysis.

 


When Barbie invades your privacy

November 19, 2010

Mattel’s Barbie doll is now wired. Literally.

The new Barbie Video Girl, which retails for just over $100, has a built-in camera in the doll’s necklace and an LCD screen on her back. The doll also comes equipped with a USB cable that enables you to transfer video recordings to your home computer and then online to YouTube or Facebook.

Not surprisingly, some are calling for a ban on Barbie Video Girl because of the potential that children will post online videos which infringe their privacy. Should we ban Barbie Video Girl? If so, should we ban all children’s toys with cameras? Read more>>


How to monitor your reputation on social networks

November 15, 2010

CTV News has an excellent article that discusses important issue of how to monitor your reputation on social networks. While including some practical tips, the article discusses the importance of being proactive with your online reputation and privacy in what is described as “this Wild West world”.


Social media: Is your organization’s head in the sand?

October 26, 2010

Is your organization in the social media world?

If your answer is “no” you’re wrong. Sorry, but it was a trick question. Whether your organization admits it or not, it is in the social media world.  Clients, prospective clients, employees and even competitors are almost certainly engaging in conversations about your organization on Facebook and LinkedIn. The question is whether you’re a part (or even aware) of those conversations. The second question is what are you going to do to shape those conversations, to the extent that you can?

The reality is that Canadian employees, for example, are blogging, tweeting and accessing social networking websites with increasing frequency. And the result is increased legal risks for Canadian businesses. These risks include disgruntled employees intentionally revealing trade secrets, defaming supervisors, harassing co-workers, or posting negative information about their employers’ business. There are even additional threats resulting from loyal employees who inadvertently disclose information online that runs afoul of privacy and competition laws. These threats won’t go away if your company has its head in the sand regarding social media.

One important step to dealing with and leveraging social media is to implement a social media policy within your organization. Doing so won’t address every potential headache related to social media, but it will help to manage online discussions that are occurring during and after work hours by your own employees. And since some of the greatest risks I’ve mentioned above stem from your employees, my best advice is to implement a social media policy. Key components in a social media policy should include:

  • defining the scope of prohibited activities;
  • clarifying to whom the policy applies;
  • addressing how infringing content should be removed from social media sites;
  • spelling out who, when and how monitoring of social media sites occurs; and
  • advising of penalties and enforcement of the policy.

Must departing employees “de-friend” connections on LinkedIn?

June 16, 2010

Can the act of connecting with other professionals on social networking websites such as LinkedIn constitute a violation of a non-compete or non-solicitation contractual undertaking? Are departing employees that are subject to such restricted covenants required to disconnect and “de-friend” colleagues and customers of their former employer until the contractual undertaking have expired?

ComputerWorld is reporting today that an IT staffing firm has accused one of its former employees of violating her non-compete undertaking through her conduct on LinkedIn. I’m not aware of any similar lawsuit to date in Canada so it’ll be interesting to see how this particular case evolves in the U.S. This case and others that I’ve previously noted highlight the blurring line between online and offline worlds. Businesses should consider whether or not, and to what extent, they should try to enforce such restrictive covenants in the social networking world. Stay tuned…


Is covert surveillance ever legal?

June 10, 2010

A former administrator in the Rural Municipality of La Broquerie has alleged that town politicians installed hidden video surveillance cameras in nearly every room in the municipality offices to secretly spy on rival councillors, staff and even the public.

Manitoba’s Ombudsman is investigating these explosive allegations. If they are true, it is very hard to image a legal defence. But can the use of covert video surveillance ever be legal?

Read more>>


Social Media and the Workplace webinar: Watch now!

May 20, 2010

Thanks to everyone from Europe, the U.S. and across Canada who attended last week’s Social Media and the Workplace webinar. If you didn’t have a chance to attend, you can now watch the webinar here.

Related information on this blog that may be of interest to you includes this audio link to my recent CJOB|68 radio interview with Human Resources specialist Barbara Bowes in which we discuss privacy issues in the workplace. You may also want to read this article I penned with my colleague Andrew Buck entitled Monitoring Employee Email: A Privacy Primer. And, of course, you can use the blog’s “Tags” to navigate to specific content of interest.


Man jailed for secretly filming naked wife: ABC News

March 12, 2010

In what can only be describe as a bizarre fact scenario, ABC News is reporting that “an appeals court in the US state of Minnesota has upheld a one-year prison sentence for a man who drilled a hole in his bathroom wall and filmed his wife naked without her consent.”

The case is interesting because it deals with the important privacy issue of what constitutes a “reasonable expectation of privacy” (in this case, in one’s own bathroom).  Read the story here>>


Follow

Get every new post delivered to your Inbox.

Join 73 other followers