IAPP Canada Dashboard Digest https://iapp.org/news/canada-dashboard-digest/ Canada Dashboard Digest - Your source for the most important privacy and data protection news from Canada. The key elements for understanding marketing privacy https://iapp.org/news/a/the-key-elements-for-understanding-marketing-privacy https://iapp.org/news/a/the-key-elements-for-understanding-marketing-privacy As data protection laws increase in complexity, "marketers must navigate this changing terrain with agility," Lime Legal founder Lisette Meij, CIPP/A, CIPP/E, CIPP/US, CIPM, CIPT, FIP, and Uplevel founder and Principal Raashee Gupta Erry, CIPP/US, CIPM, write. They said overlooked compliance areas include website modifications and legally integrating new clients and vendors. They also recommended privacy professionals better collaborate with marketing teams by looking at "legal requirements with a creative eye."
Full story

]]>
2024-03-18 11:44:49
IAB releases State of Data 2024 report https://iapp.org/news/a/iab-releases-its-state-of-data-2024-report https://iapp.org/news/a/iab-releases-its-state-of-data-2024-report IAB released its State of Data 2024 report to assess "privacy compliance and sustainable, consumer-friendly strategies." The report claimed the digital advertising industry is not prepared for data privacy changes after 82% of surveyed advertisers said the structure of their organizations have been impacted by legislation and user-tracking signal loss.
Full story

]]>
2024-03-15 11:40:03
Council of Europe finalizes AI framework https://iapp.org/news/a/coe-finalizes-ai-framework https://iapp.org/news/a/coe-finalizes-ai-framework The Council of Europe Committee on Artificial Intelligence completed the Artificial Intelligence, Human Rights, Democracy and the Rule of Law Framework Convention. "While this treaty has been elaborated by the Council of Europe with like-minded international partners, it will be a global instrument, open to the world," Council Secretary General Marija Pejčinović Burić said. Editor's note: Explore the IAPP AI Governance Center and subscribe to the AI Governance Dashboard.
Full story

]]>
2024-03-15 11:39:21
Notes from the IAPP Canada Managing Director, 15 March 2024 https://iapp.org/news/a/notes-from-the-iapp-canada-15-march-2024 https://iapp.org/news/a/notes-from-the-iapp-canada-15-march-2024 Technology companies like Uber and Airbnb have, to say it mildly, really transformed our day-to-day world. They capitalized on innovative technologies and made it easier for everyone to get around, order take out, go on vacation and so on.

When I use Uber, I am sometimes notified the driver has a camera in their car. I suppose, if I'm not comfortable with that, I can cancel the car and ask for a different one. Personally, I like it when the driver has a camera in the car. It not only signals that they are safety-conscious, it also lends me a bit comfort.

I don't always feel this way about video surveillance. Nanny cams are, to me, creepy. And, I'd never stay in a hotel or short-term rental if I knew there was a camera watching me as I went about living my life.

This is why I applaud Airbnb's move this week to ban the use of indoor cameras in their listings. They also augmented their policies in regard to what is permitted when the property owner uses cameras that monitor outdoor locations.

The reaction from Canadian regulators was quick. The Office of the Privacy Commissioner of Canada and a handful of provincial privacy commissioners readily praised the move and endorsed the ban on indoor cameras. They also took the opportunity to stress their view that privacy is fundamental right.

If I were Airbnb, I'd use the privacy regulators' joint statement in my future marketing efforts.

We discussed this case in my class this week. The students and I talked about how it's becoming more common to see certain organizations use pro-privacy policy decisions as ways to grow their customer base by gaining trust.

Apple did this a few years ago when they started advertising how their products have privacy built in by design. Airbnb's policy change is the latest example.

We've been saying it for a long time now: Good privacy builds trust, which builds more loyal customers. It's good to see some organizations catching on.

In a few weeks, my family and I head off for a little vacation, and, yes, we're using a short-term rental app for what looks like a beautiful sea-view apartment. Before we leave, I'm going to double check what their policy is on video cameras. If they aren't following the Airbnb example, they'll likely get a fuss.

Have a great weekend everyone.

]]>
2024-03-15 09:21:52
Ontario IPC details investigation into university's AI test proctoring https://iapp.org/news/a/ontario-ipc-details-investigation-into-universitys-ai-test-proctoring https://iapp.org/news/a/ontario-ipc-details-investigation-into-universitys-ai-test-proctoring In a blog post, Ontario Information and Privacy Commissioner Patricia Kosseim unpacked the privacy impacts her office considered in an investigation of McMaster University's artificial intelligence-powered test proctoring. She noted the investigation found alleged breaches of the Freedom of Information and Protection of Privacy Act related to data collection and use by the third-party proctoring service, proper notice and consent to students, and insufficient safeguards around student data.
Full story

]]>
2024-03-15 09:10:11
British Columbia lawsuit claims Flo Health shared personal data with Facebook https://iapp.org/news/a/lawsuit-claims-health-app-shared-personal-data-with-facebook-without-consent https://iapp.org/news/a/lawsuit-claims-health-app-shared-personal-data-with-facebook-without-consent A lawsuit filed with the Supreme Court of British Columbia claimed the Flo Health app shared users' data without consent, CBC News reports. Flo Health allegedly shared information, including "details about their periods, sex lives and pregnancies," to companies such as Facebook without users' consent. The company denied the claims, saying it does not share data without users' permission.
Full story

]]>
2024-03-15 09:03:07
Large language models present privacy risks https://iapp.org/news/a/large-language-models-present https://iapp.org/news/a/large-language-models-present The use of large language models is creating data privacy issues because they tend to disclose personal information they scrape from the internet without the consent of the data subject, Axios reports. Artificial intelligence data leaks come in many forms, such as an accidental disclosure or through malicious actions like building a model that circumvents privacy controls. Editor's note: Explore the IAPP AI Governance Center and subscribe to the AI Governance Dashboard. 
Full story

]]>
2024-03-14 11:42:41
Canadian privacy regulators applaud Airbnb's ban on indoor cameras https://iapp.org/news/a/multiple-canadian-privacy-regulators-applaud-airbnb-for-banning-indoor-cameras https://iapp.org/news/a/multiple-canadian-privacy-regulators-applaud-airbnb-for-banning-indoor-cameras The Privacy Commissioner of Canada and the provincial data protection regulators in Alberta, British Columbia and Quebec issued a joint statement commending property rental platform Airbnb for banning indoor cameras from rentals. "Where people live or stay, including rental accommodations, are places where we expect a high level of privacy," regulators said. "The new measures will help to better protect the fundamental right of individuals to privacy."
Full story

]]>
2024-03-14 11:40:51
European Parliament passes landmark AI Act https://iapp.org/news/a/world-sees-first-major-regulatory-framework-with-eu-ai-act-passage https://iapp.org/news/a/world-sees-first-major-regulatory-framework-with-eu-ai-act-passage The EU Artificial Intelligence Act was approved by European Parliament 13 March on a 523-46 vote. Despite the passage, the EU's new rules for AI development and use still have important steps to take before taking full effect. IAPP Staff Writer Caitlin Andrews reports on the detailed regulatory work ahead while exploring various reactions to Parliament's final vote.
Full story

]]>
2024-03-13 11:45:27
Privacy Sandbox faces challenges with competition markets https://iapp.org/news/a/privacy-sandbox-faces-challenges-with-competition-markets https://iapp.org/news/a/privacy-sandbox-faces-challenges-with-competition-markets Google's Privacy Sandbox is facing challenges from competition advocates looking to halt the sandbox due to its current antitrust trials, Digiday reports. "A concern for many is that Google may seek to use the Privacy Sandbox to circumvent the remedies that may be adopted by antitrust authorities in the ad tech cases it faces," Geradin Partners founding Partner Damien Geradin said.
Full story

]]>
2024-03-13 11:41:32
Airbnb bans indoor cameras in surveillance policy update https://iapp.org/news/a/airbnb-bans-indoor-cameras-in-surveillance-policy-update https://iapp.org/news/a/airbnb-bans-indoor-cameras-in-surveillance-policy-update Airbnb banned indoor surveillance devices, including cameras and audio recorders, in its rental properties as part of an update to security policies, NPR reports. The policy takes effect 30 April and will include outdoor cameras in places "where there's a greater expectation of privacy."
Full story

]]>
2024-03-12 11:40:44
Notes from the IAPP Canada Managing Director, 8 March 2024 https://iapp.org/news/a/notes-from-the-iapp-canada-managing-director-8-march-2024 https://iapp.org/news/a/notes-from-the-iapp-canada-managing-director-8-march-2024 I think it is common these days to give up some of our privacy for the sake of convenience. An example is our use social media for a variety of reasons while knowing that the company behind it is making money from our personal information. However, the list of tradeoffs goes on.

In the news this week is another change that is happening globally and I wonder if it will catch on in Canada. The story is about how airports are installing facial recognition technology to try and make air travel more convenient. The idea being that if you let your face be your identifier, it will speed things up as we move through the various security check points that are set up prior to getting on an airplane.

I suppose this might play out in a number of ways, but one thing to watch out for is whether there will be appropriate safeguards in place to make sure this sensitive piece of personal information isn't misused.

When the "naked machine" first appeared at airports in Canada, many people were initially aghast at the level of detail the operator of the machine had access to. Things evolved and the technology actually works in a much more privacy-friendly way. So much so, that I don't mind stepping into the futuristic chamber and having it swirl around me, although I feel like the next step is that it should beam me to my location so I can avoid the plane ride.

I hope that as they roll out facial recognition in airports, privacy pros are involved at the outset. Privacy impact assessments, at the very least, should be used to mitigate any privacy risks associated with the technology. And, if they do this properly, people might learn to trust its implementation and be comfortable with it.

If it's done poorly, however, it will turn people off and there will be backlash — much like there was when the X-ray machine first came onto the scene, before things were course-corrected.

The rollout of this technology also has legal implications. Airlines and airports are subject to Canada's private-sector laws while much of the security within the airport is conducted by public institutions that are governed by our public-sector laws. I'm sure it's no shock to most the people reading this when I say that these laws don't really line up that well anymore. 

All in all, to me this is yet another example of technology and business practices advancing while our federal and provincial legislatures keep their snail's pace.

]]>
2024-03-08 09:55:01
Privacy experts raise concerns about airport facial recognition programs https://iapp.org/news/a/privacy-experts-raise-concerns-about-airport-facial-recognition-programs https://iapp.org/news/a/privacy-experts-raise-concerns-about-airport-facial-recognition-programs Privacy experts are concerned about biometric data usage in airports as airlines such as Air Canada continue development of their facial recognition programs, CBC News reports. Air Canada said its Digital Identification trial program is voluntary and limits data processing by deleting travelers' data within 36 hours after their flight.
Full story

]]>
2024-03-08 09:50:04
Microsoft to integrate Google Privacy Sandbox within advertising services https://iapp.org/news/a/microsoft-to-integrate-google-privacy-sandbox-within-its-advertising-services https://iapp.org/news/a/microsoft-to-integrate-google-privacy-sandbox-within-its-advertising-services Microsoft announced it will incorporate the Google Privacy Sandbox application programming interface within its advertising products, MediaPost reports. Microsoft will use Google's advertising privacy standards to continue to advance "innovation of privacy enhancing technologies to fully support the requirements of digital advertising."
Full story

]]>
2024-03-07 11:40:44
Platform aims to ease global children's privacy compliance for online video game developers https://iapp.org/news/a/platform-looks-to-ease-global-childrens-privacy-compliance-for-online-video-game-developers https://iapp.org/news/a/platform-looks-to-ease-global-childrens-privacy-compliance-for-online-video-game-developers As ensuring children's data privacy becomes a business necessity, the newly launched compliance platform k-ID is attempting to offer a streamlined solution for online video game developers to ease their global regulatory burdens. IAPP Staff Writer Alex LaCasse spoke with two k-ID co-founders CEO Kieran Donovan and Chief Legal Officer Timothy Ma, CIPP/E, CIPM, about how the platform will make children's privacy law compliance more seamless in more than 200 markets around the world.
Full story

]]>
2024-03-06 11:44:55
Study examines reliance on third-party cookies for advertisers https://iapp.org/news/a/study-examines-reliance-on-third-party-cookies-for-advertisers https://iapp.org/news/a/study-examines-reliance-on-third-party-cookies-for-advertisers MediaPost reports a study from 33Across found advertisers still rely primarily on third-party cookies, despite several internet browsers planning to deprecate them in 2024. Retail advertisers have made some shifts, investing 26% of programmatic budgets in alternative cookie technology.
Full story

]]>
2024-03-06 11:42:40
IAPP launches AIGP certification https://iapp.org/news/a/iapp-aigp-certification-now-available https://iapp.org/news/a/iapp-aigp-certification-now-available The IAPP launched its Artificial Intelligence Governance Professional certification 5 March. The AIGP certification exam follows the now-deployed AIGP training program from the IAPP AI Governance Center. The first in-person test will be available exclusively at the IAPP Global Privacy Summit 4 April. The certification exam will be available for purchase through the IAPP store 2 April.
Full story

]]>
2024-03-05 11:41:38
OECD publishes report on data scraping ethics https://iapp.org/news/a/oecd-publishes-report-on-data-scraping-ethics https://iapp.org/news/a/oecd-publishes-report-on-data-scraping-ethics Duke University Science and Society Fellow Lee Tiedrich wrote for the Organisation for Economic Co-operation and Development about the ethics of data scraping for artificial intelligence systems. Tiedrich explored the controversies around the practice and what solutions have been studied by international regulators. Editor's note: Explore the IAPP AI Governance Center and subscribe to the AI Governance Dashboard.
Full story

]]>
2024-03-05 11:40:36
European Commission holds meeting with adequacy partners https://iapp.org/news/a/european-commission-leads-meeting-with-dpa-heads-from-adequate-countries https://iapp.org/news/a/european-commission-leads-meeting-with-dpa-heads-from-adequate-countries The European Commission held a meeting 4 March with European Data Protection Board Chair Anu Talus and data protection authorities from the 15 countries that have an adequacy agreement in place with the EU. The meeting focused on common themes in their data protection laws, areas for cooperation for enforcement matters and the benefits of the safe, free flow of data.
Full story

]]>
2024-03-04 11:45:17
Supreme Court of Canada rules police must use warrant to obtain IP addresses https://iapp.org/news/a/canadas-supreme-court-says-police-must-have-a-warrant-to-obtain-an-ip-address https://iapp.org/news/a/canadas-supreme-court-says-police-must-have-a-warrant-to-obtain-an-ip-address The Supreme Court of Canada ruled that law enforcement must have a warrant to obtain an IP address, saying an IP address is a "reasonable expectation of privacy," CBC News reports. British Columbia Civil Liberties Association Litigation Director Vibert Jack said, "The idea that Canadians wouldn't have an expectation of privacy in their IP addresses is a very scary proposition."
Full story

]]>
2024-03-04 11:42:46