April 20, 2010
Canada’s Privacy Commissioner, Jennifer Stoddart, has teamed up with nine other country’s privacy watchdogs today to warn Google and other organizations to better respect people’s privacy rights. The privacy commissioners have sent a letter to Google, accusing it of overlooking privacy values and legislation in launching new online products.
The privacy commissioners’ letter states, “we are increasingly concerned that, too often, the privacy rights of the world’s citizens are being forgotten as Google rolls out new technological applications. We were disturbed by your recent rollout of the Google Buzz social networking application, which betrayed a disappointing disregard for fundamental privacy norms and laws… Unfortunately, Google Buzz is not an isolated case. Google Street View was launched in some countries without due consideration of privacy and data protection laws and cultural norms. In that instance, you addressed privacy concerns related to such matters as the retention of unblurred facial images only after the fact, and there is continued concern about the adequacy of the information you provide before the images are captured… We therefore call on you, like all organizations entrusted with people’s personal information, to incorporate fundamental privacy principles directly into the design of new online services. That means, at a minimum:
collecting and processing only the minimum amount of personal information necessary to achieve the identified purpose of the product or service;
providing clear and unambiguous information about how personal information will be used to allow users to provide informed consent;
creating privacy-protective default settings;
ensuring that privacy control settings are prominent and easy to use;
ensuring that all personal data is adequately protected, and
giving people simple procedures for deleting their accounts and honouring their requests in a timely way.”
The privacy commissioners’ demand that Google and other organizations better incorporate privacy into the design of new online services underscores the need for the “Privacy by Design” initiative that Ontario’s Information and Privacy Commissioner recently discussed in my “A Conversation with Dr. Ann Cavoukian” post. All organizations, regardless of their size (after all, we’re all not Google), would be well-advised to learn from today’s “buzz” about Google Buzz.
Leave a Comment » | 
Data Protection, Due Diligence, Ontario's Information and Privacy Commissioner, Personal Information, Privacy, Privacy Commissioner of Canada, Social Networking Websites, Technology | Tagged: Due Diligence, Google, Internet, Personal Information, Privacy, Privacy Commissioner, Privacy Compliance | 
Permalink
Posted by Brian Bowman
September 29, 2009
The Lawyers Weekly is running a story that focuses on one of the most cutting edge and rapidly emerging areas of law – online reputation management. Here are some excerpts from the story, which profiles an ongoing client matter:
“On the heels of a recent New York state court decision that ordered Google Inc. to reveal the identity of an anonymous blogger in a defamation suit, a Winnipeg business lawyer has asked the California-based online search engine giant to do the same and out a blogger on behalf of an Ottawa-area resident. Brian Bowman, a partner with Pitblado LLP in Winnipeg who specializes in privacy, access to information, online reputation management, intellectual property and technology matters, says that his client was defamed on a site appearing on Google-operated blogspot.com (also known as Blogger.com).”
“The New York court decision and the Canadian case raise “one of the fundamental legal questions of our time over the appropriate balance between legitimate, anonymous Internet speech versus the right for people to protect their reputations,” says Bowman, who expects more of these situations will emerge in the near future.”
Read the full story here.
1 Comment | Access to Information, Blogs, Defamation, Internet, Online Reputation Management, Privacy, Social Networking Websites | Tagged: Access to Information, Blogs, Defamation, Google, Internet, Online Reputation Management, Privacy, Social Networking | Permalink
Posted by Brian Bowman
August 31, 2009
For over a year, there has been widespread speculation in Ottawa over who is behind a particular blog. In this respect, I’ve been retained by a prominent individual residing in the Ottawa area to deal with defamatory content on the blog and to discover the identity of the anonymous blogger (or bloggers) for court action and, ultimately, damages and costs. Click here to listen to my recent interview on point with Ottawa’s CFRA radio station. The matters discussed in the interview have received considerable national media attention including from the National Post, Maclean’s magazine, the Ottawa Citizen, the Winnipeg Free Press and the Ottawa Sun.
1 Comment | Blogs, Defamation, Internet, Online Reputation Management, Privacy, Social Networking Websites | Tagged: Google, Online Reputation Management, Privacy | Permalink
Posted by Brian Bowman
April 27, 2009
Over the past couple of years, the world has been preparing for a pandemic. Most experts believed that the avian flu was the most significant threat that faced the world, but recent declarations of a potential pandemic with confirmation of cases in Mexico, the U.S. and Canada from a swine flu have led to fears that the next pandemic is upon us. In the event of a pandemic, the government of Canada has set up a website, which will provide information to the public.
In times of fear, governments and citizens alike often overreact to address a threat. It is times like this that individuals, in addition to heeding advice about how to avoid the flu, should be vigilant about what measures the government may be taking to address this health crisis. Last summer, Canada experienced another health crisis when a strain of listeria was found in certain meat products. Tragically, by the time it was over, 21 people had reportedly died. The public health crisis was announced mid-August, but a team of researchers at Google later found that searches for the term listeriosis spiked in Canada about a month before the public announcement. An article published in the Canadian Medical Association Journal indicated that those searches lined up with the peak of the outbreak while the public announcement came while new cases were on the decline.
The analysis of aggregated search trends has been proposed as a means to fight pandemics and outbreaks of illnesses. However, even those proposing this analysis have admitted this type of analysis is complicated because it is difficult to know who is searching and why. In the Government of Canada’s News Release on April 26, 2009, a short privacy policy was cited stating that although Service Canada does not normally use cookies, if you have cookie notifications set on your browser, you would be notified. However, earlier this month, the same site indicated that the Pandemic Influenza Portal did not normally use cookies to track visitors to the site and that the system would notify you before any cookies were used so you could refuse them with no reference to what your computer settings were.
This change is a minor one but it may possibly be an indication of the small bits of privacy that Canadians will be expected to give up during these times of concern.
Leave a Comment » | Government, Health Crisis, Internet, Privacy, Security | Tagged: Cookies, Flu, Google, Government, Health, Internet, Pandemic, Privacy | Permalink
Posted by Brian Bowman
April 9, 2009
Another day, another development in the Google Street View story. Canada’s Privacy Commissioner and several provincial privacy commissioners have commented on street level imaging technology by releasing a timely Fact Sheet on the related privacy issues.
The commissioners point out that ”a common misconception is that a company doesn’t need your permission to take your photograph in a public place. In fact, one of your key protections under Canadian privacy law is that you should know when your picture is being taken for commercial reasons, and what your image will be used for. Your consent is also needed.”
The Winnipeg Free Press is also running an excellent story in today’s newspaper, which highlights some of the broader issues related to Google Street View. Arthur Schafer, a professor at the University of Manitoba and director of the Centre for Professional and Applied Ethics, comments in the story about the related ethical issues while I comment in the story about the related legal issues.
1 Comment | Internet, PIPEDA, Privacy, Technology | Tagged: Businesses, Google, Information Technology, Internet, Personal Information, PIPEDA, Privacy, Privacy Commissioner, Privacy Compliance, Technology | Permalink
Posted by Brian Bowman
April 6, 2009
The looming battle between privacy advocates and Google Street View could have implications beyond Google and its Canadian-based service providers, who are currently taking detailed photos of Canadian cities. I’m quoted in today’s Winnipeg Sun article on this issue, where I argue that the implications of the Google Street View battle could extend to how Canadian privacy laws are interpreted and enforced.
If you’re not ramped up on Google Street View, you may want to read the Wikipedia description, which does a good job of explaining the Google service. David Fraser also has an illustrative blog post, which highlights the remaining privacy issues despite Google’s efforts to blur faces and licence plates.
Despite the fact that Google’s Canadian-based service providers are taking pictures in public places, Canadian privacy laws generally require the consent of individuals for the collection of their personal information. In fact, the first ever Case Summary under PIPEDA dealt with video surveillance activities in public places. In the Case Summary, the former Privacy Commissioner advised the company being investigated that its intended public video surveillance for commercial purposes was unlawful and should not be pursued. More recently, and on point, Canada’s Privacy Commissioner, Jennifer Stoddart, has sent a letter to Google outlining the concerns about Google Street View from a Canadian privacy law perspective.
Stay tuned… this story is just beginning.
Leave a Comment » | Internet, PIPEDA, Privacy, Technology, Video Surveillance | Tagged: Businesses, Google, Internet, Personal Information, PIPEDA, Privacy, Privacy Commissioner, Privacy Compliance | Permalink
Posted by Brian Bowman
March 24, 2009
In terms of privacy, as with many other things, each step forward seems to come with a catch that makes the step forward a little smaller than one would hope. Google, in response to demands from privacy advocates and users, has taken a progressive step forward and created a means for users of Google to opt out of their targeted advertising by allowing a user to access Google Ad Preferences to change settings or to opt out completely.
At the same time, Google has announced plans to launch a new type of targeted advertising. Currently, when an Internet user visits a webpage with Google Adsense, Google will store cookies on a user’s computer and remember their interests from previous searches. The example used by Google is that if you have an interest in gardening, you may be shown gardening ads along with those related to the site you are visiting.
While Google’s addition of its Ad Preferences program is encouraging for privacy advocates, it does come in the wake of an entirely new and -according to privacy advocates – more invasive means of targeting ads at users. As part of this new initiative, Google has asked all Google Adsense publishers to update their privacy policies to notify users of their site of the fact that interest-based advertising will be displayed.
The Privacy Commissioner once noted that although PIPEDA (and other privacy legislation) imposes obligations on organizations to take appropriate measures in protecting personal information, sometimes the more important role of privacy legislation is to help people shape their view of privacy.
By revising their privacy policies, businesses will be taking steps to comply with applicable privacy laws; but whether these steps are enough to address the expectations of their customers regarding privacy is a matter to be best considered by each business. In the meantime, if a business using Adsense has any questions about this change or requires any assistance in updating their Privacy Policy, I would encourage you to contact me to discuss.
Leave a Comment » | Access to Information, Internet, Privacy, Security, Technology | Tagged: Access to Information, Google, Internet, Personal Information, PIPEDA, Privacy, Security, Technology | Permalink
Posted by Brian Bowman
Canada’s Privacy Commissioner, Jennifer Stoddart, has teamed up with nine other country’s privacy watchdogs today to warn Google and other organizations to better respect people’s privacy rights. The privacy commissioners have sent a letter to Google, accusing it of overlooking privacy values and legislation in launching new online products.
