Information & Ethics committee  That's a very important question. A basic privacy principle is the right to be forgotten, so in our laws, organizations can only retain information as long as they need it for business purposes and then it should be destroyed. I led the Facebook investigation in 2009 in the fed

Information & Ethics committee  For clarity, are you talking about the definition of work product information within PIPEDA?

Information & Ethics committee  I think it's important to have a work product definition, because it takes out of the definition of personal information what might be actually just the product of somebody's workplace—an opinion that they write as a lawyer, a report they write as an engineer. To me, that's not p

Information & Ethics committee  In our discussion today we've been talking about how we need to get the law right. We also need to get the policy right. There needs to be incentives to get the private sector players on board. We also need public education to teach, especially, young Canadians how to properly pr

Information & Ethics committee  Absolutely. In terms of ideas for limiting use by social media companies, obviously, people are voluntarily putting information online on their profiles. The company should only use that data for the purposes that are clearly stated, and that's the whole principle of transparenc

Information & Ethics committee  I think consent is very significant in the online world, but it's only part of the answer. I also agree with you that end user agreements, with the lengthy notices and the legalese is not the solution to the problem. Some very good work has been done in short, just-in-time notice

Information & Ethics committee  Mr. Chair and honourable members, thank you very much for the opportunity to speak to you today. With me today are Caitlin Lemiski and Helen Morrison, senior policy analysts with my office. I first appeared before this committee in my previous role as assistant privacy commiss