Information & Ethics committee  I agree with that. I'd just add one other dimension. It's something that I mentioned very briefly. In the politics of adequacy assessment, it is a political judgment, not just a legal judgment. I have a couple of points on this. One is that the Europeans really do want this syst

Information & Ethics committee  I wish. On the point about the provincial laws, I think there was an assumption initially that if PIPA in B.C. and Alberta, and the law in Quebec were considered substantially similar to PIPEDA, they would, by default, be considered adequate under the European Union standards.

Information & Ethics committee  I was going to speak about privacy impact assessments, codes of practice, standards, and certification, and also the processing of sensitive data. There's a significant difference between what PIPEDA and the regulation say about sensitive data. In particular, I think there's a di

Information & Ethics committee  Thank you, Mr. Chair. Thank you for the opportunity to appear before you again. I am a professor of political science at the University of Victoria, and I'm generally known for my comparative work on privacy governance in both the public and the private sectors. I understand t

Information & Ethics committee  Yes.

Information & Ethics committee  Yes, I said I would be presenting a more thorough submission, and I will include those.

Information & Ethics committee  There are a couple of explanations, I think. First is consistency with the federal Privacy Act and the model of implementation there. And as I mentioned, if order-making power is given on the side of PIPEDA, that would create some anomalies, but on the other hand, the Privacy Act

Information & Ethics committee  That's my belief, yes. The issue concerning the naming of names and the issue concerning appeal of the commissioner's orders need to be very carefully thought through. My own perception of the B.C. and Alberta models is that at the moment they're working reasonably well. But it i

Information & Ethics committee  I'm not an administrative lawyer and I couldn't get into the details, but in most other jurisdictions there is a power to say, for example, “Stop doing that. Stop collecting that information.” That, as we argue, typically provides the incentive to comply at an earlier stage in th

Information & Ethics committee  I really have nothing to say unless you want me to raise some exceptions.

Information & Ethics committee  Yes, but the American laws demand notification of consumers. Is that your question? Many of them do--they differ. If there's a security breach, the individuals affected have to be notified that this has occurred so they can take appropriate steps.

Information & Ethics committee  Who would keep it on record? I think that's the question.

Information & Ethics committee  On my preferred solution to this issue, I know a bit about the way the American laws are not working.

Information & Ethics committee  For example, I learned that in some states when a security breach occurs, the companies concerned notify the consumers and take it as an opportunity to give a marketing pitch. You know, “You've lost your data, and by the way, would you like another mortgage?” On my preferred so

Information & Ethics committee  I don't have that in front of me right now.