Background: The Standing Committee on Access to Information, Privacy and Ethics is currently conducting interviews in preparation for a report to Parliament on changes to Canada's Personal Information Protection and Electronics Document Act (PIPEDA). Nymity, on behalf of The Privacy Advisor, recently interviewed
Tom Wappel, MP, Scarborough Southwest, who also serves as Chairman of the Standing Committee on Access to Information, Privacy and Ethics.

The Privacy Advisor (TPA): How does the regulatory review of PIPEDA process work? What are the goals?

Wappel: The act mandated that a Parliamentary Committee review the operation and effectiveness of the act, five years after it came into force. This review was referred to our committee by the House of Commons. Our committee decided to hear from interested stakeholders, the public, the Minister of Industry and, of course, the Privacy Commissioner. The goals are to try to identify if there are any shortcomings in the act, based on the experience since it came into force, and make recommendations to the Minister on how to improve the act.

TPA: Who is on the committee?

Wappel: The Committee is composed of 12 Members of Parliament: 5 Conservatives, 4 Liberals, 2 Bloc Quebecois and 1 NDP member. As you can see, the opposition members outnumber the government members. This is reflective of a minority Parliament.

TPA: Who is presenting to the committee and how were they selected?

Wappel: The committee, through its Steering Committee, in consultation with the Clerk of the Committee and the committee's research staff, decided on a list of witnesses, representative of the various groups. An invitation also was broadcast for interested parties to indicate to the clerk their interest in either appearing before the committee or submitting a written brief. Respondents also were considered by the steering committee. The goal was to have a broad and diverse group of interveners.

TPA: What have been the key areas of concern by presenters so far?

Wappel: Some presenters have felt that the act is more or less fine the way it is. Others have suggested that the Privacy Commissioner have order-making powers; that there be a definition of "work product" contained in the act; that there be some sort of mandatory security breach notification mechanism; that there be the ability to more readily exchange information if it is in furtherance of potential fraud or other criminality; that it be easier for potential purchasers to obtain relevant information from sellers prior to purchase of the business; and that there be some recognition of the speed of development of the information highway; the potential exploitation of children on the Internet; and the international aspects of the Information Age. That is just a short synopsis of some of what we have heard so far.

TPA: What are the key areas of concern for the committee?

Wappel: The key concern of the committee is to ensure that all those who wish to present either do so, submit a brief or have their concerns aired by others. We want to try to make sure that the act will operate in the fairest and most efficient way possible into the future.

TPA: What happens after the review is complete? What are the steps to amend PIPEDA?

Wappel: Upon the completion of the hearing of evidence, the committee will draft a report to the government. We hope it will be unanimous, but it may not be. There may be concurring reports with additional comments, or there may be dissenting reports, however, there will certainly be a majority report. Once the report is finalized and passed by the committee, it is presented to the House of Commons, for the attention of the government. The usual practice is for the relevant ministry to consider the report and draft a response for approval by its minister, who will then have Cabinet approve the final response, which will be tabled in the House of Commons. This may take up to 180 days approximately. The response usually contains a detailed list of the recommendations of the committee which the government will accept, or reject, with the reasons why.

TPA: What happens if an election is called?

Wappel: If an election is called before the committee issues its report, the work of the committee is effectively lost. A new Parliament will decide how it wants to deal with the fact that a report on PIPEDA has not been submitted to Parliament, despite the clear wording of the act. Usually, but not always, the new committee would adopt the evidence heard by our committee. But depending on the results of the election and the composition of the new committee, it could be "back to the drawing board." If an election is called after the committee reports but before the government response, we would expect that the newly constituted committee would adopt the previous committee's report, resubmit it to the new House and request a response from the new government. However, there is nothing this committee can do to bind a future committee to a particular course of action. If an election is called after the government issues its response, but before any recommendations are implemented, the newly elected government is not bound to follow the response of the previous government.

TPA: When would we expect PIPEDA to be amended?

Wappel: It is only a guessing game as to when amendments to PIPEDA would be forthcoming. I would expect that, before any major recommendation were implemented, the ministry would hold consultations with stakeholders to discuss how most efficiently to implement the changes.

TPA: In what form would PIPEDA be modified? Could the Canadian Standards Association principles be modified?

Wappel: It is too early to comment on the form of modifications to PIPEDA, if any, as we are still hearing evidence and have not yet begun to discuss our draft report.

TPA: Have there been any concerns relating to Quebec's constitutional challenge of PIPEDA?

Wappel: The issue of Quebec's constitutional challenge to PIPEDA has been raised by some witnesses and committee members. As far as we can tell, the matter is stalled in the courts. Until the courts advise otherwise, we have to assume that the act is constitutional.

TPA: In closing, what else is on the agenda for the committee?

Wappel: The committee's first report of this Parliament called upon the Minister of Justice to prepare and submit to Parliament a new Access to Information Act, by December 15, 2006, for consideration by the committee. This did not happen. The committee has requested the Minister of Justice to appear before the committee this month, to discuss this issue further. The committee is also aware that the Privacy Act is in need of review and modernization.

Party: Liberal

Nymity (www.nymity.com) provides Web-based privacy management support solutions that help organizations manage the risks that lead to a data breach, a privacy complaint and to non-compliance or over-compliance with privacy laws.