Speech (House debate)

{
    "time": "2013-10-22 18:10:00",
    "attribution": {
        "en": "Ms. Peggy Nash (Parkdale\u2014High Park, NDP)",
        "fr": "Mme Peggy Nash (Parkdale\u2014High Park, NPD)"
    },
    "content": {
        "en": "<p data-HoCid=\"3443691\" data-originallang=\"en\">Mr. Speaker, it is a pleasure for me to to speak on Bill <a data-HoCid=\"6251848\" href=\"/bills/41-2/C-475/\" title=\"An Act to amend the Personal Information Protection and Electronic Documents Act (order-making power)\">C-475</a> on the issue of privacy and digital communications.</p>\n<p data-HoCid=\"3443692\" data-originallang=\"en\">The whole privacy issue has been a thorny one for the Conservatives. Last year they had Bill C-30, the online snooping bill, which triggered a huge countrywide backlash. Many Canadians were concerned about that bill because it proposed some very serious invasions of privacy and was an attack on the fundamental rights and freedoms of Canadians.</p>\n<p data-HoCid=\"3443693\" data-originallang=\"en\">Privacy is also an issue because increasingly we have seen that many federal government departments, including HRSDC and Indian affairs, have lost personal information they have collected from Canadians. However, the good news for Canadians is that the NDP digital affairs critic, the MP for <a data-HoCid=\"170229\" href=\"/politicians/charmaine-borg/\" title=\"Charmaine Borg\">Terrebonne\u2014Blainville</a>, has been on the job defending the interests of Canadians. We thank her for introducing Bill <a data-HoCid=\"6251848\" href=\"/bills/41-2/C-475/\" title=\"An Act to amend the Personal Information Protection and Electronic Documents Act (order-making power)\">C-475</a>, which is an excellent response for our times to the issue of digital privacy and personal information.</p>\n<p data-HoCid=\"3443694\" data-originallang=\"en\">Bill <a data-HoCid=\"6251848\" href=\"/bills/41-2/C-475/\" title=\"An Act to amend the Personal Information Protection and Electronic Documents Act (order-making power)\">C-475</a> responds to a number of calls for greater security for public information. In the ethics committee last year there was a study on social media and privacy, led by the NDP. That committee and that study heard numerous calls from the Privacy Commissioner of Canada, legal experts on Internet security, consumer protection groups, and concerned citizens for the need to update the Personal Information Protection and Electronic Documents Act, a lengthy act that is commonly known as PIPEDA. There are many ways this act can be updated, but the fact is that it has not been updated since the year 2000.</p>\n<p data-HoCid=\"3443695\" data-originallang=\"en\">If we think back, the year 2000 was a long time ago, before the era of iPads and smart phones. It was a time when Canadians voluntarily shared much more of their information. Times have changed dramatically, but because our laws have not changed and have not offered Canadians more protection during that period, it is not surprising that more and more Canadians are losing confidence in the ability of the government to be able to protect their privacy when it comes to PIPEDA.</p>\n<p data-HoCid=\"3443696\" data-originallang=\"en\">Before going into it in more detail, I will summarize what this bill would do. It would ensure, first of all, that Canadians would be notified if there was a breach in security with respect to their personal information if that breach could cause them harm.</p>\n<p data-HoCid=\"3443697\" data-originallang=\"en\">It would also add new strengths to the compliance section. Right now the Privacy Commissioner does not have much in the way of power to enforce compliance, which is unlike the situation in many other countries in the world, so it would bring Canada onto a level playing field with many other countries.</p>\n<p data-HoCid=\"3443698\" data-originallang=\"en\">The issue of online privacy is one of growing concern. We are now in the age of big data. Companies are data mining, gathering personal information from a variety of sources, and using it for marketing, for advertising, for personalized ads, for all kinds of measures. There is nothing to protect the privacy of Canadians. There is nothing to protect the personal data of Canadians when there is a data breach that could cause them harm.</p>\n<p data-HoCid=\"3443699\" data-originallang=\"en\">What we found in the ethics study of this issue was that there is increasing commodification of this data, called big data, by companies online so that they can do marketing, in which this personal information is often collected, used and disclosed to other parties. The person whose information is collected often does not have any idea that this is even happening. They certainly did not give consent, and it is in violation of PIPEDA. </p>\n<p data-HoCid=\"3443700\" data-originallang=\"en\">Throughout the ethics study, there were repeated calls by Internet and privacy experts and civil society groups to empower the Privacy Commissioner of Canada with enforcement powers and to introduce mandatory data breech notification. That is exactly what Bill <a data-HoCid=\"6251848\" href=\"/bills/41-2/C-475/\" title=\"An Act to amend the Personal Information Protection and Electronic Documents Act (order-making power)\">C-475</a> would do. </p>\n<p data-HoCid=\"3443701\" data-originallang=\"en\">I want to thank my colleague from <a data-HoCid=\"170229\" href=\"/politicians/charmaine-borg/\" title=\"Charmaine Borg\">Terrebonne\u2014Blainville</a> for her excellent work on this issue and her tailoring of the bill to really respond to this very recent study in updating this legislation.</p>\n<p data-HoCid=\"3443702\" data-originallang=\"en\">Again, what Bill <a data-HoCid=\"6251848\" href=\"/bills/41-2/C-475/\" title=\"An Act to amend the Personal Information Protection and Electronic Documents Act (order-making power)\">C-475</a> would do is give enforcement powers to the Privacy Commissioner of Canada. It would allow the Privacy Commissioner to order an organization that is found to be in violation of PIPEDA to undertake actions to comply with the act. If they do not comply with the orders within a timeline established by the commissioner, they could be liable to a fine of up to $500,000, as determined by the Federal Court. It is a very serious penalty if they are given the opportunity to comply with the act and fail to do so. </p>\n<p data-HoCid=\"3443703\" data-originallang=\"en\">Second, it would introduce mandatory data breach notification where there is possible risk of harm to individuals whose information has been compromised. Individuals must be notified. </p>\n<p data-HoCid=\"3443704\" data-originallang=\"en\">If anyone thinks these are by any means radical measures\u2014I am sure they sound like a lot of common sense to Canadians\u2014many other jurisdictions already have such measures in law. Countries such as the U.K., France, Germany and Australia and some provinces have this provision in law. British Columbia, Alberta and Quebec have commissioners responsible for data protection or privacy. They are equipped with enforcement powers to force organizations to comply with the law. It seems like good common sense. These enforcement powers for all of these other jurisdictions include administrative monetary penalties. Canada is behind the times when it comes to PIPEDA and the lack of enforcement and the lack of notification. </p>\n<p data-HoCid=\"3443705\" data-originallang=\"en\">What are others saying about this legislation brought forward by our colleague from <a data-HoCid=\"170229\" href=\"/politicians/charmaine-borg/\" title=\"Charmaine Borg\">Terrebonne\u2014Blainville</a>? OpenMedia.ca executive director Steve Anderson said, \u201cWe welcome...[the MP's] online privacy bill.... This bill is a useful stepping stone to safeguard our privacy\u201d.</p>\n<p data-HoCid=\"3443706\" data-originallang=\"en\">Michael Geist, chair of Internet and e-commerce law at the University of Ottawa, a renowned public affairs commentator who often has a column in my local newspaper in Toronto, said:</p>\n<blockquote><p data-HoCid=\"3443707\" data-originallang=\"en\">Bill C-475 is a far better proposal.... Those provisions would do [sic] far to ensure greater respect for Canadian privacy law and give Canadians the assurance of notifications in the event of security breaches. </p>\n</blockquote><p data-HoCid=\"3443708\" data-originallang=\"en\">In conclusion, the people I represent in Parkdale\u2014Hyde Park include many young artists, young communicators and people who work in digital media. I have heard many calls for this kind of privacy legislation. It is long overdue, and I would urge all members of the House to vote in favour of Bill <a data-HoCid=\"6251848\" href=\"/bills/41-2/C-475/\" title=\"An Act to amend the Personal Information Protection and Electronic Documents Act (order-making power)\">C-475</a>.</p>",
        "fr": "<p data-HoCid=\"3443691\" data-originallang=\"en\">Monsieur le Pr\u00e9sident, je suis heureuse de prendre la parole au sujet du projet de loi <a data-HoCid=\"6251848\" href=\"/bills/41-2/C-475/\" title=\"An Act to amend the Personal Information Protection and Electronic Documents Act (order-making power)\">C-475</a> sur la question de la protection de la vie priv\u00e9e et des communications num\u00e9riques.</p>\n<p data-HoCid=\"3443692\" data-originallang=\"en\">La question de la protection de la vie priv\u00e9e a toujours \u00e9t\u00e9 \u00e9pineuse pour les conservateurs. L'ann\u00e9e derni\u00e8re, ils ont pr\u00e9sent\u00e9 le projet de loi C-30, sur l'espionnage \u00e9lectronique, qui a d\u00e9clench\u00e9 une lev\u00e9e de boucliers dans tout le pays. Le projet de loi a inqui\u00e9t\u00e9 de nombreux Canadiens, car il pr\u00e9voyait de graves atteintes \u00e0 la vie priv\u00e9e et violait les droits et libert\u00e9s fondamentales des Canadiens.</p>\n<p data-HoCid=\"3443693\" data-originallang=\"en\">La protection de la vie priv\u00e9e est aussi un probl\u00e8me, car de plus en plus, nous constatons que des minist\u00e8res f\u00e9d\u00e9raux, notamment RHDCC et les Affaires indiennes, perdent des renseignements personnels recueillis aupr\u00e8s de Canadiens. N\u00e9anmoins, fort heureusement, la d\u00e9put\u00e9e de <a data-HoCid=\"170229\" href=\"/politicians/charmaine-borg/\" title=\"Charmaine Borg\">Terrebonne\u2014Blainville</a>, qui est la porte-parole n\u00e9o-d\u00e9mocrate en mati\u00e8re d'affaires num\u00e9riques, d\u00e9fend les int\u00e9r\u00eats des Canadiens. Nous la remercions d'avoir d\u00e9pos\u00e9 le projet de loi <a data-HoCid=\"6251848\" href=\"/bills/41-2/C-475/\" title=\"An Act to amend the Personal Information Protection and Electronic Documents Act (order-making power)\">C-475</a>, qui constitue une excellente r\u00e9ponse aux questions modernes concernant la protection de la vie priv\u00e9e et des renseignements personnels \u00e0 l'\u00e8re num\u00e9rique.</p>\n<p data-HoCid=\"3443694\" data-originallang=\"en\">Le projet de loi <a data-HoCid=\"6251848\" href=\"/bills/41-2/C-475/\" title=\"An Act to amend the Personal Information Protection and Electronic Documents Act (order-making power)\">C-475</a> apporte une r\u00e9ponse \u00e0 tous ceux qui demandent d'am\u00e9liorer la protection de l'information d\u00e9tenue par les pouvoirs publics. L'ann\u00e9e derni\u00e8re, le comit\u00e9 de l'\u00e9thique a fait une \u00e9tude sur les m\u00e9dias sociaux et la protection de la vie priv\u00e9e \u00e0 l'instigation du NPD. Dans le cadre de cette \u00e9tude, le comit\u00e9 a recueilli les propos de la commissaire \u00e0 la protection de la vie priv\u00e9e, de divers juristes sp\u00e9cialistes de la s\u00e9curit\u00e9 sur Internet, de groupes de protection des consommateurs et de citoyens, qui insistaient sur la n\u00e9cessit\u00e9 d'une mise \u00e0 jour de la Loi sur la protection des renseignements personnels et les documents \u00e9lectroniques, une loi volumineuse couramment appel\u00e9e LPRPDE. Il y aurait bien des fa\u00e7ons de moderniser cette loi, car elle n'a fait l'objet d'aucune mise \u00e0 jour depuis l'an 2000.</p>\n<p data-HoCid=\"3443695\" data-originallang=\"en\">Si l'on songe \u00e0 l'an 2000, c'\u00e9tait il y a bien longtemps, avant l'arriv\u00e9e des iPad et des t\u00e9l\u00e9phones intelligents. Les Canadiens communiquaient alors volontairement bien plus de renseignements les concernant. Les temps ont bien chang\u00e9, mais dans l'intervalle nos lois n'ont pas \u00e9volu\u00e9 ou offert une protection accrue aux Canadiens. Il n'est donc pas \u00e9tonnant que ces derniers soient en train de perdre confiance dans l'aptitude du gouvernement \u00e0 prot\u00e9ger leur vie priv\u00e9e dans le cadre de la LPRPDE.</p>\n<p data-HoCid=\"3443696\" data-originallang=\"en\">Avant d'entrer dans les d\u00e9tails, j'aimerais r\u00e9sumer ce que pr\u00e9voit le projet de loi. Tout d'abord, les Canadiens recevraient un avis en cas d'atteinte \u00e0 la s\u00e9curit\u00e9 de leurs renseignements personnels, si cette atteinte risque de leur causer pr\u00e9judice.</p>\n<p data-HoCid=\"3443697\" data-originallang=\"en\">Le projet de loi renforcerait les dispositions sur la coercition. En ce moment, le commissaire n\u2019a pas beaucoup de pouvoirs pour imposer le respect de la loi, ce qui tranche avec ce qu\u2019on observe dans bien d\u2019autres pays. Le projet de loi placerait donc le Canada sur le m\u00eame pied que beaucoup d\u2019autres pays.</p>\n<p data-HoCid=\"3443698\" data-originallang=\"en\">On se pr\u00e9occupe de plus en plus du respect des renseignements personnels dans les \u00e9changes en ligne. Nous sommes \u00e0 l\u2019\u00e8re des m\u00e9gadonn\u00e9es. Les entreprises explorent les donn\u00e9es, elles recueillent des renseignements personnels provenant de sources diverses et elles s\u2019en servent en marketing et en publicit\u00e9, elles produisent des annonces personnalis\u00e9es ou font toutes sortes d\u2019autres utilisations des donn\u00e9es. Il n\u2019y a rien pour prot\u00e9ger la vie priv\u00e9e des Canadiens, rien pour prot\u00e9ger leurs renseignements personnels, lorsqu\u2019il y a une atteinte \u00e0 ces donn\u00e9es qui peut leur nuire.</p>\n<p data-HoCid=\"3443699\" data-originallang=\"en\">Gr\u00e2ce \u00e0 l\u2019\u00e9tude du Comit\u00e9 de l'\u00e9thique, nous avons constat\u00e9 une marchandisation croissante des donn\u00e9es, qu\u2019on appelle les m\u00e9gadonn\u00e9es, par les entreprises qui font du commerce en ligne. Les donn\u00e9es servent au marketing, et les renseignements personnels sont souvent recueillis, utilis\u00e9s, communiqu\u00e9s \u00e0 d\u2019autres parties. Souvent, celui dont les renseignements sont recueillis n\u2019a pas la moindre id\u00e9e de ce qui se passe. Il n\u2019a certainement pas donn\u00e9 son consentement, ce qui viole la Loi sur la protection des renseignements personnels et les documents \u00e9lectroniques. </p>\n<p data-HoCid=\"3443700\" data-originallang=\"en\">Tout au long de l\u2019\u00e9tude, des sp\u00e9cialistes d\u2019Internet et de la protection de la vie priv\u00e9e ainsi que des groupes de la soci\u00e9t\u00e9 civile ont demand\u00e9 \u00e0 maintes reprises que le commissaire \u00e0 la protection de la vie priv\u00e9e ait des pouvoirs de coercition et ils ont r\u00e9clam\u00e9 l'instauration d'un avis obligatoire au sujet des atteintes aux donn\u00e9es. C\u2019est exactement ce que le projet de loi <a data-HoCid=\"6251848\" href=\"/bills/41-2/C-475/\" title=\"An Act to amend the Personal Information Protection and Electronic Documents Act (order-making power)\">C-475</a> propose.</p>\n<p data-HoCid=\"3443701\" data-originallang=\"en\">Je tiens \u00e0 remercier ma coll\u00e8gue de <a data-HoCid=\"170229\" href=\"/politicians/charmaine-borg/\" title=\"Charmaine Borg\">Terrebonne\u2014Blainville</a> de son excellent travail dans ce dossier. Je la remercie d\u2019avoir adapt\u00e9 le projet de loi pour qu\u2019il tienne vraiment compte, en modernisant la loi, de l\u2019\u00e9tude r\u00e9alis\u00e9e tr\u00e8s r\u00e9cemment. </p>\n<p data-HoCid=\"3443702\" data-originallang=\"en\">Je le r\u00e9p\u00e8te, le projet de loi <a data-HoCid=\"6251848\" href=\"/bills/41-2/C-475/\" title=\"An Act to amend the Personal Information Protection and Electronic Documents Act (order-making power)\">C-475</a> conf\u00e9rerait des pouvoirs de coercition au commissaire \u00e0 la protection de la vie priv\u00e9e du Canada. Celui-ci pourrait ordonner aux organismes qui enfreignent la Loi sur la protection des renseignements personnels et les documents \u00e9lectroniques de prendre les mesures voulues pour se conformer \u00e0 la loi. Si les organismes en question ne donnent pas suite aux ordonnances dans les d\u00e9lais pr\u00e9vus par le commissaire, ils seraient passibles d\u2019une amende pouvant atteindre 500 000 $, \u00e0 d\u00e9terminer par la Cour f\u00e9d\u00e9rale. Il s\u2019agit d\u2019une sanction tr\u00e8s s\u00e9v\u00e8re qui est impos\u00e9e aux organismes qui ne se conforment pas \u00e0 la loi, m\u00eame quand on leur a donn\u00e9 l'occasion de se racheter. </p>\n<p data-HoCid=\"3443703\" data-originallang=\"en\">En outre, le projet de loi rendrait obligatoire la d\u00e9livrance d'avis en cas d'atteinte \u00e0 la protection des donn\u00e9es si la personne dont les renseignements personnels ont \u00e9t\u00e9 compromis risque d'\u00eatre victime de pr\u00e9judice.</p>\n<p data-HoCid=\"3443704\" data-originallang=\"en\">Si quelqu'un pense qu'il s'agit de mesures radicales \u2014 bien que je sois certaine que les Canadiens estiment que ces mesures sont sens\u00e9es \u2014, je tiens \u00e0 lui faire savoir que certaines provinces et de nombreux pays ont d\u00e9j\u00e0 adopt\u00e9 de telles mesures, notamment le Royaume-Uni, la France, l'Allemagne et l'Australie. La Colombie-Britannique, l'Alberta et le Qu\u00e9bec se sont dot\u00e9s de commissaires qui sont responsables de la protection des donn\u00e9es ou de la vie priv\u00e9e. Ces commissaires poss\u00e8dent des pouvoirs coercitifs leur permettant d'obliger les organisations \u00e0 respecter la loi. Voil\u00e0 une mesure qui semble pleine de bon sens. Les pays et les provinces poss\u00e9dant ces pouvoirs coercitifs peuvent notamment imposer des sanctions p\u00e9cuniaires. Le Canada accuse un retard en ce qui concerne la Loi sur la protection des renseignements personnels et les documents \u00e9lectroniques, le manque de pouvoir coercitif et l'absence d'avis.</p>\n<p data-HoCid=\"3443705\" data-originallang=\"en\">Voyons ce qu'on dit au sujet de la mesure l\u00e9gislative pr\u00e9sent\u00e9e par la d\u00e9put\u00e9e de <a data-HoCid=\"170229\" href=\"/politicians/charmaine-borg/\" title=\"Charmaine Borg\">Terrebonne\u2014Blainville</a>. Le directeur ex\u00e9cutif d'OpenMedia.ca, Steve Andersen, a affirm\u00e9 ce qui suit: \u00ab Nous accueillons favorablement le projet de loi [de la d\u00e9put\u00e9e] portant sur la protection de la vie priv\u00e9e sur Internet [...] Ce projet de loi est un bon point de d\u00e9part pour prot\u00e9ger la vie priv\u00e9e des Canadiens. \u00bb </p>\n<p data-HoCid=\"3443706\" data-originallang=\"en\">Michael Geist, pr\u00e9sident de la Chaire de recherche du Canada en droit d'Internet et du commerce \u00e9lectronique de l'Universit\u00e9 d'Ottawa, commentateur reconnu dans le domaine des affaires publiques et chroniqueur r\u00e9gulier dans un journal de Toronto, a dit ce qui suit: </p>\n<blockquote><p data-HoCid=\"3443707\" data-originallang=\"en\">Le projet de loi C-475 est une bien meilleure proposition [...] Ces dispositions assureraient un plus grand respect des lois visant la protection des renseignements personnels et elles veilleraient \u00e0 ce que les Canadiens soient avertis en cas d'atteinte \u00e0 la protection de leurs renseignements personnels. </p>\n</blockquote><p data-HoCid=\"3443708\" data-originallang=\"en\">En conclusion, on compte parmi les gens que je repr\u00e9sente dans la circonscription de Parkdale\u2014High Park de nombreux jeunes artistes, de jeunes communicateurs et des gens qui travaillent dans les m\u00e9dias num\u00e9riques. On a souvent demand\u00e9 l'adoption d'une telle mesure l\u00e9gislative visant \u00e0 prot\u00e9ger les renseignements personnels. Elle se fait attendre depuis trop longtemps. J'exhorte donc les d\u00e9put\u00e9s \u00e0 voter en faveur du projet de loi <a data-HoCid=\"6251848\" href=\"/bills/41-2/C-475/\" title=\"An Act to amend the Personal Information Protection and Electronic Documents Act (order-making power)\">C-475</a>.</p>"
    },
    "url": "/debates/2013/10/22/peggy-nash-3/",
    "politician_url": "/politicians/peggy-nash/",
    "politician_membership_url": "/politicians/memberships/4084/",
    "procedural": false,
    "source_id": "8105070",
    "h1": {
        "en": "Private Members' Business",
        "fr": "Initiatives parlementaires"
    },
    "h2": {
        "en": "Personal Information Protection and Electronic Documents Act",
        "fr": "La Loi sur la protection des renseignements personnels et documents \u00e9lectroniques"
    },
    "document_url": "/debates/2013/10/22/",
    "related": {
        "document_speeches_url": "/speeches/?document=%2Fdebates%2F2013%2F10%2F22%2F"
    }
}