A coalition of Canadian civil rights organizations has called for stricter privacy legislation to regulate the collection of personal information by federal political parties. This appeal arises months after Parliament amended privacy laws in March, eliminating some requirements that previously applied to these parties. The groups argue that current privacy frameworks leave political entities able to gather voters’ data—such as addresses, demographics, and political preferences—without any external oversight, a situation 80 percent of Canadians oppose, preferring equivalent regulations as imposed on the private sector. For further details, see the JURIST report.
Federal parties were initially exempted from submitting personal information protection policies to the Chief Electoral Officer due to an amendment in Bill C-4, which passed earlier this year. The law retroactively annulled the requirement, rendering the parties immune to privacy infringements for the last two decades. Another legislative shift with Bill C-25, reinstated the requirement for parties to report their privacy policies and notify voters about data breaches. University of Ottawa’s Michael Geist, an expert in privacy law, criticized the amendments for their minimal privacy obligations and for not including essential safeguards like limits on data use and retention.
This legal environment follows a Supreme Court of British Columbia ruling in 2024 which had affirmed that provincial privacy laws should apply to federal parties to protect residents. However, Bill C-4 overruled that decision, maintaining provincial laws inapplicable to federal parties. Jason Woywada, executive director of BC Freedom of Information and Privacy Association, highlighted the risks, stating that exempting political parties undermines trust in democratic institutions. He emphasized the need for accountability amid increasing security threats.
In Alberta, a data breach involving 2.9 million residents’ details sparked further concern. This incident, where a list of electors was leaked to a private company, underlined the lack of enforcement against political parties due to provincial law limitations. The privacy commissioner began an investigation into the company but could not extend it to the political party involved.
The call for robust privacy legislation reflects broader concerns about data security and privacy management within political contexts, urging federal parties to consider legislative reforms before the next election cycle.