Privacy watchdog taking Facebook to court, says company breached privacy laws

Canada's federal privacy watchdog plans to take Facebookto court following an investigation that found the socialmedia giant broke a number ofprivacy laws and failed to take responsibility for protecting Canadians' personal information.

"Canadians are at risk because the protections offered by Facebook are essentially empty," saidPrivacy Commissioner Daniel Therrienafter releasing a blistering report into the company's operationsThursday.

Therrien and his B.C. counterpart, Michael McEvoy,joined forces last spring to investigate the roles of Facebook and the Canadian company AggregateIQin the scandal involving the British firm Cambridge Analytica.

Cambridge Analytica is accused of harvesting data of more than 50 million Facebook users worldwide to create social media strategies to support U.S. President Donald Trump's 2016 election campaign.

Privacy Commissioners say Canada has a lot of catching up to do

5 years ago

Duration 1:33

B.C. Information and Privacy Commissioner Michael McEvoy and Privacy Commissioner of Canada Daniel Therrien say that Canada is lagging behind many global communities when it comes to privacy laws.

The Canadian investigation was triggered by reportsthat an app called "This is Your Digital Life," which encouraged users to complete a personality quiz, collected the information of usersas well as their Facebook friends information later used by Cambridge Analytica.

The report estimatesabout 87 million users worldwide had their information disclosed, including more than 600,000 Canadians.

"They say that they are accountable. We have seen in this instance that they were not accountable," Therrientold reporters during a media conference in Ottawa Thursday.

Thereport said the company broke a number of federal and B.C. laws by:

• Failingto obtain valid and meaningful consent of installing users.

• Failing to obtain meaningful consent from friends of installing users.

• Having inadequate safeguards to protect user information.

• Failingto be accountable for the user information under its control.

Facebook disputes findings

Facebook has publicly acknowledged a "major breach of trust," but vehemently disputes the Canadian report.

"After many months of good-faith cooperation and lengthy negotiations, we are disappointed that the OPC considers the issues raised in this report unresolved. There's no evidence that Canadians' data was shared with Cambridge Analytica, and we've made dramatic improvements to our platform to protect people's personal information," said Erin Taylor, communications manager for Facebook Canada,in an email.

"We understand our responsibility to protect people's personal information, which is why we've proactively taken important steps towards tackling a number of issues raised in the report and worked with the OPC to offer additional concrete measures we can take to address their recommendations, which includes offering to enter into a compliance agreement."

"The stark contradiction between Facebook's public promises to mend its ways on privacy and its refusal to address the serious problems we've identified or even acknowledge that it broke the law is extremely concerning," said Therrien.

The commissioners said they tried to implement measures to ensure Facebookrespects its privacy obligations in the future, but the company reportedly has refused to submitvoluntarily to audits of its privacy policies and practices over the next five years.

The Office of the Privacy Commissioner of Canada says it will now take the matter to Federal Court to seek an order to force the company to change its privacy practices.

Push for more regulations

Therrienalso said his office will take down its Facebook page because it doesn't want to be associated with the platform's privacy rules.

Therrien says his office not on Facebook because it's irresponsible

5 years ago

Duration 1:17

Privacy Commissioner Daniel Therrien says that while there is a place for social media networks, but they need to be provided in a way that doesn't harm people.

"We do not want to continue to be associated with an organization that we found is irresponsible," he said.

Both commissioners are using Thursday'sreport to call for stronger sanctioning powers for provincial and federal privacy regulators.

"The ability to levy meaningful fines would be an important starting point," saidMcEvoy.

Democratic Institutions Minister KarinaGould said the government is open tobringing in regulations and "all options are on the table." But with an October election fast approaching, Gould is left with little legislative runway.

"We will have more to say in the coming weeks,"she told CBC's Power & Politics.

'The time of self-regulation is coming to an end' | Karina Gould

5 years ago

Duration 10:31

Minister of Democratic Institutions Karina Gould joined Power & Politics Thursday to discuss a privacy watchdog report that found Facebook had violated Canadian privacy law.

"We understand that the time of self-regulation is coming to an end. Governments around the world are realizingand understanding, as are citizens around the world, as to how these social media companies, these digital platforms, have been using dataand how they have also been manipulated by malicious actors."

NDP MP Charlie Angus said federal action is overdue.

"This Liberal government's cozy relationship with the American tech giants and their lobbyists means that they always put Canadians' privacy rights second. We need a government that will be willing to implement the all-party recommendations of the Ethics Committee and stand up to the web giants and their disregard for Canadian law," said Angus, the party's ethics critic.

"It's wrong that the Liberals and Conservatives always prefer to let private companies self-regulate instead of requiring them to do the right thing by putting the safety and privacy of Canadians before profits."

McEvoy is also looking into AggregateIQ (AIQ),the Victoria, B.C.-based marketing and software development company accused of sidestepping Brexit campaign spending limits.

The Canadian whistleblower at the centre of the scandal, Christopher Wylie, told a U.K. parliamentary committee last year that he "absolutely" believed AIQ had drawn on Cambridge Analytica's databases for its work on the Brexit referendum.

AIQ's founders have denied any wrongdoing.

The results of that investigation are expected later this spring.

CBC Politics' new weekly Canada Votes Newsletter

Get analysis from our Parliamentary bureau as we count down to the federal election. Delivered to your inbox every Sunday evening then daily during the campaign. Sign up here