It is the chief mechanism by which individuals are able to express their autonomy and exercise control over their personal information.
Legally, organizations must obtain consent to collect, use and disclose an individual’s personal information, subject to a list of very specific exceptions.
Where data-driven practices are likely to make consent impracticable, we have proposed alternatives.
For instance, to make consent more meaningful, we will update our guidance on online consent to specify four key elements that must be highlighted in privacy notices and explained in a user-friendly way.
Though technology neutral, Canada’s laws were adopted in a much different era when routine, predictable, transparent one-on-one interactions between organizations and individuals were the norm.
Some group participants even said that with the information provided, they are “never” really able to give informed consent.
This report details that work and more, and sets a new course for the future of privacy protection in Canada.
Consent has long been considered a foundational element of .
This report will cover both the ), Canada’s federal private sector privacy law.
As was the case when I presented my last Annual Report, the swift evolution of technology—big data, the Internet of Things, biometrics and artificial intelligence, among other innovations—is continuing to have a tremendous impact on personal privacy.
In the last year, we have taken a number of concrete steps to address this issue.