The Supreme Court will hear Meta’s appeal regarding the Federal Court of Appel decision that determined that Meta didn’t get meaningful consent under PIPEDA.
https://toronto.citynews.ca/2025/06/12/supreme-court-of-canada-to-hear-facebook-privacy-case/
- - -
La Cour suprême entendra l'appel de Meta concernant la décision de la Cour d'appel fédérale qui a jugée que Meta n'avait pas obtenu un consentement valable en vertu de la LPRPDÉ.
MORE illegal spam today from "Canadian Conservatives Abroad" pushing me to vote #Conservative in #Canadian elections. I'm an ally of Canada but not a Canadian! This looks like illegal electioneering, probably sent to addresses scraped from Web mentions of Canada. To whom can I complain?
Then, a couple of months later, I get spam from a seller trying to get me to buy knockoff designer handbags, or a Nigerian prince trying to secret his fortune away, or something else odious.
But look -- the email was sent to the address "crappytire@example.net"!
Now I know, with absolute certainty, that this spammer got my address, directly or indirectly, from Crappy Tire. Maybe they sold their mailing list far and wide. Maybe their systems were hacked and every customer's email was exfiltrated.
I can now take action. If I think they sold my address, I can write a nastygram referencing their privacy policy or Canada's PIPEDA act, or Europe's GDPR, or whatever. If I think my address was stolen from their systems, I can report the security incident to them, or publicize it so others know it may have happened to them.
And most importantly, I can disable that email address. Just refuse all mail sent to it. It's no longer of use to spammers or crooks. If I ever deal with Crappy Tire again, I give them a new unique address.
Anyway, that's a lot of backstory. I use this technique extensively. I have caught many, many companies selling/renting their mailing lists in violation of their own policies. I have caught many others that have been hacked, and they didn't even know it.
So what's the thing that happens to me occasionally regarding this?
2/x
PowerSchool is under investigation by the Privacy Commisionner after breach affecting student information.
https://www.cbc.ca/news/canada/privacy-commissioner-powerschool-investigation-1.7457446
- - -
PowerSchool est sous enquête par le Commissaire à la vie privée après une brèche touchant les données d’élèves.
// Article en anglais //
3/4 – 📊 C-27 et la protection des données
C-27 devait moderniser la législation sur les données personnelles (PIPEDA) et intégrer une régulation souple de l’IA.
👉 Objectif : se rapprocher du RGPD, souvent plébicité au Canada pour sa rigueur technique et sa vision innovante.
Mais l'échec de C-27 laisse le cadre canadien obsolète, loin des standards européens.
The Federal Court of Appeal ruled that #Facebook / #Meta did not get meaningful consent from their users between 2013 and 2015 under #PIPEDA, by failing to adequately inform users during sign up.
https://toronto.citynews.ca/2024/09/10/federal-court-of-appeal-sides-with-privacy-watchdog-in-long-running-facebook-case/
- - -
La cour d’appel fédérale a jugé que Facebook/Meta n’ont pas obtenu un consentement suffisant sous la #LPRPDÉ entre 2013 et 2015, en échouant à informer adéquatement les utilisateurs lors de l’inscription.
It irks me for as much as America complains about China, China has actual data protection laws, whilst Americans keep having their most sensitive data leaked in breaches. Then Politicians in the USA get pissed off at China for wanting to protect their citizens.
Look China may not be perfect and has their own set of issues but this is one Area they are clearly ahead of the USA on.
Canada, EU, South Africa all have data rights too
#Politics #PIPL #PIPEDA #POPIA #GDPR #InfoSec #cybersecurity
PIPEDA & E-Commerce Compliance: Protecting Privacy
https://www.tresseo.com/articles/pipeda-ecommerce-compliance/
10 Things That Were A Thing When Canada’s Last Privacy Law Received Royal Assent
Canada’s current privacy laws are a joke and horribly outdated. How outdated? We thought we’d highlight what people had back then.
An issue that I don't think gets discussed enough is cloud #surveillanceCameras. A few organizations including #Amazon control the vast majority of #surveillance footage. These corporations are collecting personal information for commercial purposes without consent in contravention to #PIPEDA. We should demand better.
#cdnprivacy #privacy #surveillancecapitalism #privacymatters #cdnpoli #politics #canpoli
#Apple: Apple's privacy policy does not explain their actual privacy practices. Apple misleads consumers into false security about their privacy. Getting a response from Apple's privacy team is difficult. Apple collects personal information that doesn't further any legitimate purpose, worse than Microsoft and Google. Apple makes it difficult to manage your personal information. They're the worst of the 3.
#Microsoft: Offers a very detailed privacy policy that makes clear how personal information is used and disclosed. Microsoft is responsive to privacy inquiries and requests. Access request responses are not always understandable. Microsoft sometimes adds dubious purposes to justify collection of personal information. Microsoft offers tools to control and manage personal information but it is not as robust as Google's.
My comparison of various companies #privacy practices 🧵 :
#Google: Privacy policy is vague and doesn't always leave users with an understanding of how their personal information is used and disclosed. Access request responses are not always understandable and it is hard to contact them with questions. Google requires personal information that is not needed but furthers business purposes. Google offers many tools to manage personal information and how it is used.
Many call for the adoption of a Canadian GDPR to replace #PIPEDA, but demand the removal of one of the essential elements of that model. What is "legitimate interests"? New on my YouTube channel:
https://www.youtube.com/watch?v=eyPsUg0f1aw&list=PLV759uJFOchg2P8AVnMj4crnAA2_gP8b2&index=61
@Wolven @neurovagrant For Canadians, you also have the right to withdraw consent at any time & Twitter should have a process for this. If the process is unreasonable or broken, you can file a complaint. Twitter also should’ve obtained consent “when making significant changes to privacy practices”. #PIPEDA
File a privacy complaint https://priv.gc.ca/en/report-a-concern/file-a-formal-privacy-complaint/file-a-complaint-about-a-business/
Weirdly, I had perhaps the same issue with an #Interac e-transfer this week; I couldn't #deposit it into my credit union account. I thought it was that they'd failed to test their in-house online banking against #Firefox (which I run into a lot... feeling like 1998 again), but I also noticed 3rd-party #cookies being #blocked.
I wonder if #medical/#financial online sites loading Google/Facebook/whatever analytics violates #PIPEDA?
@rylancole It is not better, #CPPA allows for way more exceptions than #PIPEDA, provides no new protections, and will have slower enforcement. It provides 2 insignificant improvement which is substantially harmed by the fact the corporations business interests are now more important than our consent. #BillC27
I have to say I disagree with the #OPC here, raising concerns with an organization is sometimes needlessly hard and rarely results in changes. https://www.priv.gc.ca/en/blog/20230505_01/#privacy #PIPEDA
