Mr. Speaker, it is a pleasure to speak to the House today on the issue of personal privacy and specifically on Bill C-315.
Canadians are living in a world that seems to get smaller with each passing day. The distances that separate us from our families and friends are becoming easier to traverse. It has become easier to communicate with our families and with others around the globe. Sometimes, though, it feels like these same distances are becoming a little too short and the rest of the world is getting a little too close.
What has led to this dramatic change in our society? The answer is simple: the industrial and technological revolution that has so dramatically changed the face of Canada over the past 100 years. The telephone has brought friends and family from hundreds of miles away to within earshot of our voice. The car and the aeroplane have reduced long distance trips from months to a matter of hours. The computer has put volumes of information at our fingertips. The Internet has provided a gateway for the free flow of information to a knowledge hungry world.
Each of these changes has brought convenience to our daily lives. With each change came a loss of some small piece of our personal privacy. Historically our laws and traditions have responded to some aspects of the loss of our personal privacy. Trespassing laws and exclusion orders, for example, keep those we do not want to associate with at a distance.
Recent telephone innovations like call display and call blocking help us see who is trying to contact us and help us prevent unwanted calls.
Where we as a country fall short, though, is in our response to the growth of computer technology. This technology has the ability to retrieve, store and send vast amounts of information. The information age has brought a booming industry, creating a $300
million per year industry in the buying and selling of personal information.
Ontario's assistant commissioner for privacy recently exclaimed that privacy as we know it may not exist in the year 2000. The Privacy Commissioner of Canada, Mr. Bruce Phillips, agreed when he stated earlier this year that Ottawa should consider protecting the right to lead a private life and that in the next year or two is really going to tell the tale. Mr. Phillips clearly believes it is time for action in protecting personal information.
The Privacy Commissioner of Canada is not the only one who believes the time is now to protect privacy. The information highway advisory council, created by the Ministry of Industry, reported last month: "Manipulation of data may occur without the consent of the individual from whom it was collected. Moreover, the information is often used for purposes unrelated to those purposes for which it was originally collected. Because of the enormous potential for abuse there is a need for effective privacy protection. Only Quebec has enacted specific legislation governing its private sector. The council believes strongly that there should be national legislation to establish fair information practices on the information highway".
A recent Gallup poll conducted for Anderson Consulting, a private financial consulting firm based in Toronto, found similar concerns about privacy and the information highway: "Notwithstanding strong interest in the information highway, Canadians have a high level of concern as to how it may affect their privacy. Asked to indicate their level of concern for their privacy because information about them might be collected by companies involved in the information highway, 83.7 per cent described themselves as very concerned or somewhat concerned".
Bill C-315 responds to these calls for privacy protection. I should put forward a definition of the term personal information. The definition of personal information used in crafting Bill C-315 refers to data on an individual that are recorded. This could include name and phone number, business address and phone number, any identifiable physical characteristic, religion, national or ethnic origin, age or any information about education or financial history.
This information is recorded in many ways, including electronically such as on a floppy or hard disk, manually on paper or microfilm, or virtually as in computer memory or an electronic network.
Historically there are several sources that reaffirm the right to personal privacy. There is the right to privacy as guaranteed in both Bill C-62, an act respecting telecommunications, and in the 1989 case of the Queen v. Dyment, when it was established that the right to privacy does exist in Canada, that it existed before the charter of rights and freedoms and that the charter has not diminished that right. The CRTC has been vigilant in protecting this right especially with regard to junk faxes and messages.
There is the right to anonymity as determined by Telecom decision CRTC 92-7. In other words, all Canadians have the right to be left alone and the right to remain anonymous as they go about their daily activities.
In addition, the Organization for Economic Co-operation and Development, of which Canada is a member, has established a set of basic principles to help define and support the protection of personal privacy. These principles share a common theme that the collection of personal information should be open, accountable and limited to the purposes intended.
Canadians are often surprised when they learn how information is being collected and where it ends up. Personal information on Canadians is being collected in a wide variety of ways. Credit card applications, contest forms, polls and surveys, warranty cards, magazine subscriptions and other means are all used in one form or another to collect personal information.
By combining these individual client lists a detailed profile of an individual can be made without the knowledge of that individual. Firms in Canada and around the world are able to have multiple lists, cross referenced, and create a remarkably accurate portrait of an individual.
Allow me to quote from a recent consumer report study: "By overlapping the data available through thousands of information systems it is now possible to create a remarkable picture of anyone. That picture could include your age, income, political party, marital status, the number of children you have, the magazines you read, your employment history and your military and school records. A database might also know what kind of breakfast cereal you eat, the make of the car you drive and even the brand of diapers your children wear".
A recent article in "Telecommunications Policy" entitled "Will My House Still be My Castle?" added to this concern: "In the future things will be very different. It will essentially be one stop shopping for the data gatherer in the digital super highway. Information gathering, analysis, correlation and dissemination can all be automated, depersonalized and made inexpensive. The time to establish coherent public policies and safeguards is before such systems are in place and adverse precedents and vested interests become established".
Currently Canadians enjoy very little personal privacy protection. The current Privacy Act, Bill P-21, is limited to information
held by the federal government and certain federal institutions. Similar laws exist in eight of our twelve provinces and territories.
In the Northwest Territories, the Yukon Territory, Prince Edward Island and Alberta action has not yet been taken to protect personal information held by these provincial and territorial governments.
When it comes to controlling information held by the private sector the picture is far less promising. Only Quebec has taken the bold step of limiting the sale and access of this personal information.
Through bill 68, the province of Quebec has given its citizens the power to say no to the sale or exchange of their personal information. No other provincial government has acted as decisively as Quebec in this important area. I applaud Quebec for its initiative here.
Even Quebec's law, though, is far from complete. Many areas of business such as banking, cable television and numerous transportation companies are beyond the reach of Quebec's bill 68. This leaves Quebecers as vulnerable to privacy breaches in the federal jurisdiction as their counterparts in the rest of Canada.
Private industry, in a bid to avoid further federal and provincial control, has tried to address these privacy concerns. The Canadian Direct Marketing Association has created a bureau to deal with client list complaints and circulates the names of individuals who do not want their names on any member lists. However, individuals must repeat the request several times a year to ensure their names stay off the computer lists. As well, not all direct marketers are members of the CDMA, making privacy protection a hit or miss exercise.
Recently the Information Highway Advisory Council called on the Canadian government to regulate the flow of personal information. The Canadian Banker's Association has also created a set of voluntary privacy guidelines. According to a director with the office of the privacy commissioner, though, these guidelines are wide enough to drive a logging truck through. The bank guidelines are so ineffective that the Royal Bank of Canada admitted in 1993 that it sometimes included client card numbers, names, ages and addresses to market research firms without the client's knowledge.
We have to face the facts. Self-policing is not working. I have seen case after case in which guidelines and bureaus have turned their heads when the corporations break the rules or, at the very best, have given them a very light slap on the wrist. Industry has clearly failed Canadians in this area and it is time for Parliament to take action.
With this in mind let us turn our attention to Bill C-315. The bill stems from the concerns of a constituent of mine, expressed to me when he learned he had ended up on some questionable mailing list through which he had received advertisements for explicit pornographic material. After doing some extensive research I learned the federal government has yet to seriously address the issue of personal privacy.
Bill C-315 is the first step in addressing this serious oversight. The bill was designed to work in harmony with provincial privacy laws such as Quebec's bill 68 and to respect provincial jurisdictions as outlined in the Constitution. At the same time, it sends a tough message to companies around the country that the misuse of personal information is a concern and that the privacy of people has to be respected.
Bill C-315 would require all companies covered by the Canada Labour Code to abide by some very strict privacy protection guidelines.
Before selling any list containing an individual's personal information, the person shall be sent a notice stating, first, that personal information about the individual as listed in the notice is held by the company; second, that permission is needed to keep the person's name on the list; and, third, that the person shall be told his or her name can be removed at any time at no cost to the individual.
At the same time any corporation using purchased lists shall send each individual on the list a notice containing, first, the source of this information; second, a description of the information held; and, third, a statement outlining how the individual can have that personal information removed from the list at any time and at no cost to themselves.
Companies receiving a removal request must comply within 10 days and confirm with the individual that his or her request has been acted on. Breaking this law would be classified as a summary conviction. For a first offence a company or individual breaking this law would face a fine of up to $5,000. A repeat offence could double the maximum to $10,000. Charges would have to be laid within one year of the offence.
I will be the first to admit that these are tough measures. In my view they only reflect the importance people place on their own privacy. Polls have shown time and time again that Canadians feel their privacy is at risk and action must be taken to reverse this trend.
Interesting enough, the criticism I have received concerning the fine limits is that the proposed fines are not high enough, that for large institutions affected by the bill the suggested fines would merely be a nuisance or a slap on the wrist.
The Canadian public wants to have more control over personal information. A national privacy survey published in 1993 discovered that 71 per cent totally agreed that privacy rules should apply to both government and business. Sixty-six per cent believe that the
government should be working with business to come up with some guidelines on privacy protection in the private sector.
The Privacy Commissioner of Canada estimates that the average Canadian has his or her name crunched through various computers across the continent perhaps five to ten times daily. He further estimates that in the private sector alone $300 million a year annually changes hands in the buying and selling of client lists.
This industry is growing at an incredible rate as technological information becomes more widespread. The privacy commissioner thinks that now is the time to take action in the protection of personal information and I agree with him wholeheartedly. The rights to anonymity and privacy are constantly being threatened in the pursuit of information. It is time to restore a balance and return to Canadians their right to have some control over their personal information, privacy and anonymity.
Let us respect this right by supporting Bill C-315 when it is brought to a vote.