Evidence of meeting #34 for Access to Information, Privacy and Ethics in the 41st Parliament, 1st Session. (The original version is on Parliament’s site, as are the minutes.) The winning word was audit.

A recording is available from Parliament.

On the agenda

MPs speaking

Also speaking

  • Jennifer Stoddart  Privacy Commissioner, Office of the Privacy Commissioner of Canada
  • Chantal Bernier  Assistant Privacy Commissioner, Office of the Privacy Commissioner of Canada

11:30 a.m.

Privacy Commissioner, Office of the Privacy Commissioner of Canada

Jennifer Stoddart

I don't believe it's 100%, but I'd say it's for the majority of programs with personal information, especially the ones with sensitive personal information.

The assistant commissioner talked about our work with CATSA. We worked very closely with them on the development and implementation of the body scanner and so on.

So in the majority of cases, yes, it is done.

11:30 a.m.

Liberal

Scott Andrews Avalon, NL

Do you work with the different departments on the disposal of that information? At what times do they have to dispose of the information or provide safe disposal of the information? Is that a concern at all?

11:30 a.m.

Privacy Commissioner, Office of the Privacy Commissioner of Canada

Jennifer Stoddart

It is a concern, honourable member. One of the audits we did recently showed there were huge problems in the disposal of information by the targeted agencies.

We audit disposal practices from time to time. We remind departments of their obligations, for example, in Industry Canada, to wipe computers clean before they give them to schools, or, in the case of Library and Archives Canada, to make sure the contractor who's shredding the information is actually following the standards of the contract. As I said, then we do a follow-up in the next two or three years to see that the recommendations are being implemented.

11:30 a.m.

Liberal

Scott Andrews Avalon, NL

When you were talking about Google, you mentioned third-party audits and other organizations. What other organizations would you be referring to, like Google, that consumers should be aware of?

11:30 a.m.

Privacy Commissioner, Office of the Privacy Commissioner of Canada

Jennifer Stoddart

Under the terms of both acts, I can't name or talk about in detail ongoing operations unless it's in the public interest.

What I'm referring to is a new position I've taken in the last year because I'm concerned about the cost of enforcing privacy that is borne by the taxpayers of Canada. I think when we come to the end of an investigation and the company has not worked with us to resolve the problem and is still saying they don't care and they’re not going to do anything, or they say they were in the wrong and they’re going to do something, we should not as a government agency have to go back and audit them. That costs people and time and so on. So from now on, we're adopting a practice that, for example, is frequent with the Federal Trade Commission, one of our American counterparts. If you have real violations of the Privacy Act, PIPEDA in this case, we ask you to go and get a third party to verify that you've fixed it up and sent that back to us.

11:30 a.m.

Liberal

Scott Andrews Avalon, NL

I'm sure you are familiar with, and have seen in the media, the robocalls scandal and the information of voters being given to parties to do other things with.

I understand that political parties don't fall within the guise of a lot of data protection and what they do with their data. Have you been following this file at all? Do you have any suggestions on how political parties could better secure their data?

11:35 a.m.

Privacy Commissioner, Office of the Privacy Commissioner of Canada

Jennifer Stoddart

I think I would wait until the director general of elections has finished looking into this. But certainly in the past we have met with various members of Parliament, different parties, and we've also developed material on helping MPs secure the personal information of many of the voters they represent.

11:35 a.m.

Liberal

Scott Andrews Avalon, NL

I have a question on Bill C-30. Your counterpart in Ontario, Ann Cavoukian, has been quite critical of Bill C-30, and she's been quite vocal. Do you share some of her comments regarding Bill C-30?

11:35 a.m.

Privacy Commissioner, Office of the Privacy Commissioner of Canada

Jennifer Stoddart

As I mentioned, we've been following this for three years and have done a lot of substantive work that we have shared with provincial and territorial privacy commissioners. That's why we could together take a position on it. I think there's a common viewpoint among privacy commissioners across Canada.

11:35 a.m.

Liberal

Scott Andrews Avalon, NL

Thank you.

11:35 a.m.

NDP

The Chair Pierre-Luc Dusseault

Thank you, Mr. Andrews.

Mr. Butt, you have the floor for seven minutes.

April 26th, 2012 / 11:35 a.m.

Conservative

Brad Butt Mississauga—Streetsville, ON

Thank you very much, Mr. Chair. I don't think I had a chance to say at the last meeting congratulations on being elected the new chair of the committee.

Madam Commissioner, thank you very much for being with us this morning. In your report you stated that the number of visits to your website has increased by 36% from the previous year. How do you explain that increase? Maybe that's a positive thing because public awareness is much higher. How does the situation influence the information you are then placing online?

11:35 a.m.

Privacy Commissioner, Office of the Privacy Commissioner of Canada

Jennifer Stoddart

Thank you for your question.

We have made a conscious attempt to develop not only our website but also a youth website. We have a youth blog. We have increasingly invested in online information as Canadians and young people are increasingly online, as compared to reading written material or even watching TV. This is a very good development for us, because in an age when resources have to be counted very carefully, we think that's a very cost-effective way of getting the message out to Canadians.

11:35 a.m.

Conservative

Brad Butt Mississauga—Streetsville, ON

My daughters are 12 and 8, and my 12-year-old is tweeting and texting and all kinds of other stuff now. We obviously remind her and warn her to protect her privacy and to be a responsible user, but I am concerned about people's privacy because of the way the Internet and all these other social media sites and so on have evolved. It must make your job increasingly difficult, to draw those distinctions in what should be protected through privacy and what is really there for public consumption.

Are you finding it more difficult to draw some of these conclusions when you're investigating different things, just based on the fact that things are evolving so rapidly online? Are there additional tools you may need to react to the fact that this is the way the world is evolving?

11:35 a.m.

Privacy Commissioner, Office of the Privacy Commissioner of Canada

Jennifer Stoddart

It's a very good question.

In the time I've been Privacy Commissioner, which is a little over eight years now, yes, things have evolved tremendously. The pace at which we have to rethink and reposition ourselves has just increased exponentially.

All over the world people are looking at what the definition is of “personal information”, what should be public and private, and of course at the same time you have the parallel discussion about open government and all of those developments.

I don't know that there's any one resource that would help us. This is part of our work, but certainly one of the places where we've invested in the last few years is setting up our technology analysis branch. The director is here, if you would like to hear more about what that branch does. And there are six or seven people who are very specialized in information technology who analyze mainly what happens on the web, what's happening with mobile apps, what the implication is, and they advise us on our investigations.