Information & Ethics committee  There are two purposes, in our view, of security breach notification. One is to give individuals the ability to take precautionary measures if it's the kind of situation in which they can. But the second and equally, if not more, important reason is to provide these incentives th

Information & Ethics committee  It's coincidental to some extent. I worked as a lawyer for 12 years with the Public Interest Advocacy Centre. The last thing I did was the report on identity theft. When I left in August 2003, the report was almost, but not quite, complete. John took it over and finished it. In

Information & Ethics committee  Can I just add to that? The U.S. has a patchwork of sector-specific and issue-specific data protection laws. They do not have this nice, comprehensive law that we have. In fact, the biggest recommendation of consumer and privacy advocates in the United States is that the U.S. ado

Information & Ethics committee  The Ontario Research Network for Electronic Commerce, ORNEC, which is a public-private partnership. Four of the major banks in Canada are funding it, and their funding is matched by the Ontario government.

Information & Ethics committee  I think you have to use the mass media to reach people. There are three things we've thought of: using the mass media; inserts in government cheque mailings, possibly, and putting up good posters and brochures in government storefront offices; and working with the banks. The ba

Information & Ethics committee  The Competition Bureau is also involved with PhoneBusters.

Information & Ethics committee  It is an initiative.

Information & Ethics committee  Maybe it only works in English, I do not know, but there is a website where you can find information: www.phonebusters.com, I believe.

Information & Ethics committee  It is already against the law to use the social insurance number if there is no need to. The problem does not lie in that part of the act. The problems include enforcement—the lack of incentive and penalty for organizations that collect social insurance numbers when they shouldn

Information & Ethics committee  Could I just add one point to this? It could in fact make the problem worse, as John stated. Victims have trouble enough right now when their social insurance number has been compromised, for example, dealing with that. Imagine if your biometric identity is compromised, and I can

Information & Ethics committee  I think it's usually large businesses that are implicated, or at least the cases we hear about. It's usually large databases, larger business, credit-granting institutions that run into trouble, so I'm not sure we're talking about a huge burden on small business. Again, what we'

Information & Ethics committee  I absolutely support that, but I think it's only one piece of the puzzle. It's certainly not the full solution on the criminal law side, and I understand that the Department of Justice is looking at all of the potential Criminal Code amendments that could give the police the tool

Information & Ethics committee  Sure. I can't explain why. I couldn't disagree with her more on this point.

Information & Ethics committee  Yes, I think the Consumer Measures Committee is doing great work on this, but it's not enough. It's not pulling in the law enforcement side of things. The police have a lot of information. There's a lot more that they can be doing, particularly once someone has been victimized. V

Information & Ethics committee  We have a number of class actions. Quebec is actually the jurisdiction in Canada that is the furthest ahead with class actions. A number of consumers have achieved remedies through that. Class actions are in fact specifically designed to empower consumers to make it easier for