The Canadian Federal Court of Appeal has concluded that Facebook breached provisions of the Personal Information Protection and Electronic Documents Act (PIPEDA), which is Canada’s foundational legislation governing the handling of personal information by corporations. The decision can be reviewed here.
After an exhaustive investigation into Facebook’s data-sharing practices, it was determined by both the Privacy Commissioner of Canada and the Information and Privacy Commissioner for British Columbia that the social media giant failed on multiple fronts:
- Ensuring meaningful consent from users for apps used on the site.
- Obtaining meaningful consent from the friends of users.
- Implementing sufficient safeguards to protect user information.
- Accepting responsibility for data breaches, rather than placing blame on users or hiding behind ambiguous terms of service agreements.
Initially, a lower court sided with Facebook, arguing that the company’s data protection responsibilities concluded once third-party apps requested user information. They also noted insufficient evidence of inadequacy in Facebook’s safeguards. However, this decision was overturned on appeal.
The Privacy Commissioner effectively contended that the lower court had misinterpreted the “meaningful consent” requirements under PIPEDA. The appellate court agreed, stating that the consent provided through Facebook’s user terms was neither clear nor comprehensible, thereby failing to meet regulatory standards (PIPEDA’s meaningful consent).
The case draws significant connections to the notorious Cambridge Analytica Scandal where the data from Facebook users and their friends was exploited for political ad targeting by Cambridge Analytica, impacting major political events.
This ruling necessitates that Facebook not only revisits its policies but implements robust measures to ensure compliance with Canadian privacy laws, setting a precedence for striking a balance between technological innovation and privacy rights.
For further details, refer to the original report here.