We would like to thank you, Chair and honourable members, for inviting us to speak before you today on this important issue.
My name is Tamir Israel. I am staff counsel with CIPPIC. With me is David Fewer, our acting director. We apologize for not providing you with a brief of our position today.
CIPPIC is a legal clinic based in the University of Ottawa's Faculty of Law. Much of our mandate involves addressing the legal and policy concerns that arise from new technologies and specifically from the ever-increasing availability of private and personal information in electronic formats.
For a long time, we have been concerned with the many facets of identity theft and have researched legal and policy approaches to that problem. This work has resulted in, among other things, a public-private multidisciplinary project funded by the Ontario Research Network for Electronic Commerce, ORNEC, and a series of six working papers available on our website at www.cippic.ca. These cover most aspects of the issue.
We will be releasing a final white paper later this year, updating and summarizing our work on this issue and making specific recommendations for law and policy reform needed to address identity theft in a comprehensive manner.
We would like to point out that identity theft is a very serious phenomenon with specific impacts on individuals and society at large. You've heard that ID theft costs our economy $2 billion annually and that this is a conservative number.
There is an associated loss of confidence that is much more difficult to quantify, but equally serious. We have seen figures estimating that individual victims in Canada spend approximately $164 million of their own money and over 18 million hours annually just addressing the fallout from having their identities stolen, just to re-establish their identities.
In addition to this social and individual financial cost, there is also the invasiveness of such offences. People who have their personal information or identities taken from them for such fraudulent purposes often feel violated. People have told us that victims of ID theft often exhibit feelings similar to those seen in victims of home burglaries. There is serious psychological harm here, as well as the financial costs.
We feel that the magnitude and nature of these harms calls for a criminal component as part of any response to the problem of ID theft.
Our study of Bill S-4 has convinced us that it is well-tailored to address the specific and fairly well-documented problems raised by identity theft in the criminal sphere. It manages to provide police with the tools they need in this sphere to address these problems, while avoiding the problems of overbreadth. It does so while managing to maintain flexibility and technical neutrality. The reason it is able to do this is that it directly addresses the specific issues posed by identity theft and does not overreach in that respect.
We're here today to say that we support this bill and would gladly try to answer any outstanding questions or concerns you might have on it. We've been paying attention to your committee hearings and we've noticed that some have been raised.
But we'd also like to remind the government, in brief, that its job with respect to identity theft is not done. ID theft requires a comprehensive response. This bill largely and effectively addresses the criminal portion of this response. In addition, the government's Bill C-27, which is also currently in committee, takes important regulatory steps that will deter a great deal of ID theft activity.
But more reforms are essential to address prevention and to help individual victims deal with the problems that identity theft raises for them. Many of these additional reforms are beyond the scope of a criminal bill such as this one, and we would not want to delay the implementation of Bill S-4. However, we have your attention, so we would like to point out to you the ways in which the Criminal Code can be improved to better accommodate the needs of victims. The victim restitution provisions in clause 11 of this bill will go some way to doing that, but we feel that more can be done.
We have suggested in the past and do so here again that it would be helpful to add provisions to the Criminal Code giving victims the right to local police reports. We have found from our research that this helps victims address jurisdictional issues.
What often happens is that a resident of one city, let's say Ottawa, will have their identity stolen or the ID fraud will manifest in another city, let's say Edmonton. The victim will be directed to Edmonton police, who will have jurisdiction. The local police force will generally refuse to open an additional file because they don't like to investigate claims committed in other jurisdictions. Although I note in defence of Ottawa that we were told the OPS in particular is willing to do this, most other police forces will not.
This is a serious problem. ID theft often requires immediate action, and for an Ottawa denizen to have to contact Edmonton before a file is opened, that takes a lot of time. In the meantime, they are having credit problems.
On the other hand, ID theft also has long-term, recurring ramifications, and it simplifies matters a great deal for victims to have local police as their point of contact for any investigation. The police can then forward the investigation to a more appropriate jurisdiction, but they should remain the point of contact. It should be clarified that this applies to victims, even if the financial institution in question absorbed all the financial harm in a particular instance.
In addition, we have heard that police reports often don't contain a great deal of information. They do not even state that the offence being investigated is fraud. This means they're not very helpful to victims, in and of themselves, if they're trying to vindicate themselves with persistent creditors or with Equifax or anybody else.
To remedy this, other jurisdictions have provided, within their criminal statutes, a right to a judicial determination of factual innocence from a court of law, once an investigation is successfully completed. We point you to section 530.6 of California’s Penal Code, if you would like guidance on provisions of this nature either now or in the future. There are other examples from other jurisdictions that can be found in our working papers on our website. A broader range of suggestions is available in our working papers as well and will be collected and updated in the white paper we intend to release shortly.
We invite any questions on the issues we've raised here, on any outstanding concerns you may have with respect to the current bill that have been raised in the past hearings before you, or on any other steps that can be taken to alleviate identity theft.
Thank you.