Canadian Privacy Commissioner Report Says Existing Law Already Gives Canadians A Right To Be Forgotten
from the which-means-the-United-States-now-has-a-RTBF-apparently dept
The Privacy Commissioner of Canada is proposing something dangerous. Given the Canadian Supreme Court's ruling in the Equustek case -- which basically said Canada's laws are now everybody's laws -- a recent report issued by the Commissioner that reads something into existing Canadian law should be viewed with some concern. Michael Geist has more details.
The Privacy Commissioner of Canada waded into the debate on Friday with a new draft report concluding that Canadian privacy law can be interpreted to include a right to de-index search results with respect to a person’s name that are inaccurate, incomplete, or outdated. The report, which arises from a 2016 consultation on online reputation, sets the stage for potential de-indexing requests in Canada and complaints to the Privacy Commissioner should search engines refuse to comply.
The Commissioner envisions a system that would allow Canadians to file de-indexing requests with leading search engines, who would be required to evaluate the merits of the claim and, where appropriate, remove the link from the search index or lower its rank to obscure the search result. Moreover, the commissioner would require search engines to actively block Canadians from accessing the offending links by using geo-identifying technologies to limit access in Canada to the results.
In other words, the Commissioner is looking to import Europe's right-to-be-forgotten law, but without having to amend or rewrite any Canadian laws. The report interprets existing Canadian privacy protections as offering RTBF to Canadian citizens. And if it offers it to Canadians, it can be enforced worldwide, despite their being no local statutory right to be forgotten.
Geist notes there are several problems with the troubling conclusion the Commissioner has drawn. First, the privacy protections included in PIPEDA (Personal Information Protection and Electronic Documents Act) cover commercial activity only, regulating use of users' personal data. When it comes to search results, no commercial transaction takes place. The search engine simply returns results the user asks for. Search engines display ads with the results, but there's no purchase involved, nor is there necessarily a relinquishment of user info.
Just as importantly, the Commissioner's conclusion -- even if statutorily sound (though it isn't) -- runs directly contrary to the comments received from numerous stakeholders, including privacy groups.
The feedback from leading Internet services, media companies, academics, and civil society groups cautioned against creating a right to be forgotten in Canada. Without a foundation for its approach arising from the consultation, participants can be forgiven for wondering whether the report’s recommendations were a foregone conclusion.
As Geist points out, a right-to-be-forgotten, raised unbidden from existing privacy laws, turns search engines into tools of government micromanagement. Despite its noble aim, it will be abused more often than it is legitimately used. Fortunately, Google and other search engines have been actively challenging dubious requests. And the rest of the private sector has pitched in, with journalistic entities informing readers when convicted criminals, political figures, and other abusers of the system attempt to eradicate factual recountings of their misdeeds.
Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.
Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.
While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.
–The Techdirt Team
Filed Under: canada, censorship, data protection, free speech, global censorship, jurisdiction, privacy, right to be forgotten
Reader Comments
Subscribe: RSS
View by: Time | Thread
[ link to this | view in chronology ]
[ link to this | view in chronology ]
That's at least a small bit of sanity, even if impractical in reality.
Consider the Yellow Pages, once important, now little more than an online scam. But their information propagates to many other sites.
I once created an online parts lookup system for a lawnmower distributor. Now, 20 years later, having never worked for the lawnmower manufacturer itself, thanks to the Yellow Pages I'm listed on many sites as their IT Manager. The Yellow Pages has even tried to bill me. And I can't correct their information let alone talk to them without agreeing to a contract.
Meanwhile I live in the (name changed for privacy) Charleswood part of the city. In the Charleswood apartments, in the suite next to the caretaker's office (which has no door number.) So the Yellow Pages site has my suite# listed as the caretaker, and I get a lot of their mail. And the description for the business listing they have for my address is the one for the Charleswood Restaurant a block away.
Again, I can't correct their information let alone talk to them without agreeing to a contract.
There's already been some harm done, where the government thought I was running a business.
While it would invite abuse, there ought to be at least some pressure on companies to correct inaccurate listings. Not the search engines; but the original inaccurate sites.
As for search engines, at most there should be (and probably already is) a way to tell it to re-index the original inaccurate site once THEY make a correction.
I could go either way for sites that propagate junk data from places like the Yellow Pages with no plans or ability to re-index.
[ link to this | view in chronology ]
Re:
however sorry I feel for you, I think you're barking at the wrong tree - the RTBF explicitly targets the search engines, not the source of the information itself.
[ link to this | view in chronology ]
If I can't stop laughing . . .
[ link to this | view in chronology ]
Right to be forgotten is different from the right to be de-indexed.
The right to be de-indexed is the right to be deleted from someone's (but not other's) indexes.
These are different things. Don't conflate them. They don't like that.
[ link to this | view in chronology ]
Re: Right to be forgotten is different from the right to be de-indexed.
You are right about one thing: de-indexing from the search results and being deleted from a database are different things.
I've had occasion to ask for unwanted material to be deleted from certain websites — and the admins were gracious enough to do so. De-indexing requires a court order and I'm unwilling to go down that route because a) it's costly and b) posting the link on a blog or social media status update, etc. would get it re-indexed. I'm unwilling to play whac-a-mole for the rest of my life over something that's easily debunked.
[ link to this | view in chronology ]
Re: Re: Right to be forgotten is different from the right to be de-indexed.
[ link to this | view in chronology ]