{"id":9566,"date":"2016-08-23T12:07:25","date_gmt":"2016-08-23T16:07:25","guid":{"rendered":"http:\/\/mhgoldberg.com\/blog\/?p=9566"},"modified":"2016-08-23T13:30:25","modified_gmt":"2016-08-23T17:30:25","slug":"enforcing-privacy-in-canada","status":"publish","type":"post","link":"https:\/\/mhgoldberg.com\/blog\/?p=9566","title":{"rendered":"Enforcing privacy in Canada"},"content":{"rendered":"<p>Canada&#8217;s <a href=\"http:\/\/j.mp\/1U1YqL6\" target=\"_blank\">Office of the Privacy Commissioner<\/a> has issued <a href=\"http:\/\/j.mp\/2bBkfRn\" target=\"_blank\">its report<\/a> on the customer information data breach for <a href=\"http:\/\/j.mp\/2bBnoRa\" target=\"_blank\">Ashley Madison<\/a> discovered in July, 2015. The Privacy Commissioner&#8217;s office launched its investigation a month later, under Canada&#8217;s <a href=\"http:\/\/j.mp\/2bBqxQP\" target=\"_blank\">Personal Information Protection and Electronic Documents Act<\/a> (PIPEDA). Canada&#8217;s Privacy Commission worked together with <a href=\"http:\/\/j.mp\/2bBnTur\" target=\"_blank\">Australia&#8217;s Information Commission<\/a>, which also issued <a href=\"http:\/\/j.mp\/2bBnDeP\" target=\"_blank\">an identical report<\/a> on the findings of the joint investigation.<\/p>\n<p>The <a href=\"http:\/\/j.mp\/2bBpbpf\" target=\"_blank\">Compliance Agreement<\/a> between the Office of the Privacy Commissioner and Avid Life Media, the owners of Ashley Madison, is considered to be legally binding. The <a href=\"http:\/\/j.mp\/2bBpbpf\" target=\"_blank\">Agreement<\/a> outlines steps Ashley Madison must take, including:<\/p>\n<ul>\n<li>enhancing privacy safeguards;<\/li>\n<li>amending information retention practices;<\/li>\n<li>improving information accuracy; and,<\/li>\n<li>increasing transparency.<\/li>\n<\/ul>\n<p>Ashley Madison was found to have used a fictitious security trustmark, and concluded that meant individuals\u2019 consent was improperly obtained.<\/p>\n<blockquote><p>Finally, with respect to transparency, investigators found that at the time of the breach, the home page of the Ashley Madison website included various trustmarks suggesting a high level of security, including a medal icon labelled \u201ctrusted security award.\u201d ALM officials later admitted the trustmark was their own fabrication and removed it.<\/p><\/blockquote>\n<p>The Privacy Commissioner also identified <a href=\"http:\/\/j.mp\/2bBmxQs\" target=\"_blank\">important lessons<\/a> for all organizations to consider. The Privacy Commissioner&#8217;s website organizes some of the key takeaways from the investigation, using the following headings.<\/p>\n<ul>\n<li>General\n<ul>\n<li>Harm extends beyond financial impacts.<\/li>\n<li>Safeguards should be supported by a coherent and adequate governance framework.<\/li>\n<\/ul>\n<\/li>\n<li>Safeguards\n<ul>\n<li>Documentation of privacy and security practices can itself be part of security safeguards.<\/li>\n<li>Use multi-factor authentication for remote administrative access.<\/li>\n<\/ul>\n<\/li>\n<li>Deletion and Retention\n<ul>\n<li>There is a high bar associated with charging a fee for deletion.<\/li>\n<li>Retention policies should be based on a demonstrable rationale and timeline.<\/li>\n<\/ul>\n<\/li>\n<li>Accuracy\n<ul>\n<li>The level of accuracy required is impacted by the foreseeable consequences of inaccuracy, and should also consider interests of non-users.<\/li>\n<\/ul>\n<\/li>\n<li>Transparency\n<ul>\n<li>False or misleading statements may impact the validity of consent.<\/li>\n<li>Omission or lack of clarity of material statements may also impact the validity of consent.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p>Each of these items is more completely described with a paragraph and links for further information to aid in corporate best practices and compliance with the legislation. Among the more interesting items was the consideration that a\u00a0lack of email address verification could allow &#8220;the creation of a potentially reputation-damaging fake profile for an email address owner.&#8221;<\/p>\n<p><a href=\"http:\/\/j.mp\/2bBnoRa\" target=\"_blank\">Ashley Madison<\/a>&#8216;s website encourages its members to &#8220;find your moment&#8221; while the company tries to promote discretion, promising to help its members keep their private life private.<\/p>\n<p>A year after its data breach, the lessons from Ashley Madison need to help other firms ensure that they won&#8217;t find their own moment in the spotlight, and keep their customers&#8217; private information private.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Canada&#8217;s Office of the Privacy Commissioner has issued its report on the customer information data breach for Ashley Madison discovered in July, 2015. The Privacy Commissioner&#8217;s office launched its investigation a month later, under Canada&#8217;s Personal Information Protection and Electronic Documents Act (PIPEDA). Canada&#8217;s Privacy Commission worked together with Australia&#8217;s Information Commission, which also issued &hellip;<\/p>\n<p class=\"read-more\"> <a class=\"\" href=\"https:\/\/mhgoldberg.com\/blog\/?p=9566\"> <span class=\"screen-reader-text\">Enforcing privacy in Canada<\/span> Read More &raquo;<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_uag_custom_page_level_css":"","two_page_speed":[],"footnotes":""},"categories":[1],"tags":[],"class_list":["post-9566","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Enforcing privacy in Canada &#8226; Telecom Trends<\/title>\n<meta name=\"description\" content=\"Canada&#039;s Office of the Privacy Commissioner has issued its report on the customer information data breach for Ashley Madison discovered in July, 2015. The &#8226; August 23, 2016\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/mhgoldberg.com\/blog\/?p=9566\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Enforcing privacy in Canada &#8226; Telecom Trends\" \/>\n<meta property=\"og:description\" content=\"Canada&#039;s Office of the Privacy Commissioner has issued its report on the customer information data breach for Ashley Madison discovered in July, 2015. The &#8226; August 23, 2016\" \/>\n<meta property=\"og:url\" content=\"https:\/\/mhgoldberg.com\/blog\/?p=9566\" \/>\n<meta property=\"og:site_name\" content=\"Telecom Trends\" \/>\n<meta property=\"article:published_time\" content=\"2016-08-23T16:07:25+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2016-08-23T17:30:25+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/mhgoldberg.com\/blog\/wp-content\/uploads\/2021\/02\/mark_logo_png-scaled.png\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1061\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Mark\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@mark_goldberg\" \/>\n<meta name=\"twitter:site\" content=\"@mark_goldberg\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Mark\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/mhgoldberg.com\\\/blog\\\/?p=9566#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/mhgoldberg.com\\\/blog\\\/?p=9566\"},\"author\":{\"name\":\"Mark\",\"@id\":\"https:\\\/\\\/mhgoldberg.com\\\/blog\\\/#\\\/schema\\\/person\\\/7a2b80bac06ee3d5cacca8c7708bfe8f\"},\"headline\":\"Enforcing privacy in Canada\",\"datePublished\":\"2016-08-23T16:07:25+00:00\",\"dateModified\":\"2016-08-23T17:30:25+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/mhgoldberg.com\\\/blog\\\/?p=9566\"},\"wordCount\":453,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/mhgoldberg.com\\\/blog\\\/#organization\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/mhgoldberg.com\\\/blog\\\/?p=9566#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/mhgoldberg.com\\\/blog\\\/?p=9566\",\"url\":\"https:\\\/\\\/mhgoldberg.com\\\/blog\\\/?p=9566\",\"name\":\"Enforcing privacy in Canada &#8226; Telecom Trends\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/mhgoldberg.com\\\/blog\\\/#website\"},\"datePublished\":\"2016-08-23T16:07:25+00:00\",\"dateModified\":\"2016-08-23T17:30:25+00:00\",\"description\":\"Canada's Office of the Privacy Commissioner has issued its report on the customer information data breach for Ashley Madison discovered in July, 2015. The &#8226; August 23, 2016\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/mhgoldberg.com\\\/blog\\\/?p=9566\"]}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/mhgoldberg.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/mhgoldberg.com\\\/blog\\\/\",\"name\":\"Telecom Trends\",\"description\":\"A Canadian perspective on trends in telecom\",\"publisher\":{\"@id\":\"https:\\\/\\\/mhgoldberg.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/mhgoldberg.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/mhgoldberg.com\\\/blog\\\/#organization\",\"name\":\"Mark H Goldberg & Associates Inc.\",\"url\":\"https:\\\/\\\/mhgoldberg.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/mhgoldberg.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/mhgoldberg.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/02\\\/mark_logo_png.png\",\"contentUrl\":\"https:\\\/\\\/mhgoldberg.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/02\\\/mark_logo_png.png\",\"width\":3484,\"height\":1444,\"caption\":\"Mark H Goldberg & Associates Inc.\"},\"image\":{\"@id\":\"https:\\\/\\\/mhgoldberg.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/mark_goldberg\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/mhgoldberg.com\\\/blog\\\/#\\\/schema\\\/person\\\/7a2b80bac06ee3d5cacca8c7708bfe8f\",\"name\":\"Mark\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/351a7c78c378da7db6aac956985487573ab74c25cb83c460c715fa6d0fcfa7d2?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/351a7c78c378da7db6aac956985487573ab74c25cb83c460c715fa6d0fcfa7d2?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/351a7c78c378da7db6aac956985487573ab74c25cb83c460c715fa6d0fcfa7d2?s=96&d=mm&r=g\",\"caption\":\"Mark\"},\"description\":\"Mark Goldberg has more than 40 years of international experience in strategic planning, managing, designing and implementing telecommunications carrier networks.\",\"sameAs\":[\"http:\\\/\\\/www.mhgoldberg.com\",\"https:\\\/\\\/x.com\\\/mark_goldberg\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Enforcing privacy in Canada &#8226; Telecom Trends","description":"Canada's Office of the Privacy Commissioner has issued its report on the customer information data breach for Ashley Madison discovered in July, 2015. The &#8226; August 23, 2016","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/mhgoldberg.com\/blog\/?p=9566","og_locale":"en_US","og_type":"article","og_title":"Enforcing privacy in Canada &#8226; Telecom Trends","og_description":"Canada's Office of the Privacy Commissioner has issued its report on the customer information data breach for Ashley Madison discovered in July, 2015. The &#8226; August 23, 2016","og_url":"https:\/\/mhgoldberg.com\/blog\/?p=9566","og_site_name":"Telecom Trends","article_published_time":"2016-08-23T16:07:25+00:00","article_modified_time":"2016-08-23T17:30:25+00:00","og_image":[{"width":2560,"height":1061,"url":"https:\/\/mhgoldberg.com\/blog\/wp-content\/uploads\/2021\/02\/mark_logo_png-scaled.png","type":"image\/png"}],"author":"Mark","twitter_card":"summary_large_image","twitter_creator":"@mark_goldberg","twitter_site":"@mark_goldberg","twitter_misc":{"Written by":"Mark","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/mhgoldberg.com\/blog\/?p=9566#article","isPartOf":{"@id":"https:\/\/mhgoldberg.com\/blog\/?p=9566"},"author":{"name":"Mark","@id":"https:\/\/mhgoldberg.com\/blog\/#\/schema\/person\/7a2b80bac06ee3d5cacca8c7708bfe8f"},"headline":"Enforcing privacy in Canada","datePublished":"2016-08-23T16:07:25+00:00","dateModified":"2016-08-23T17:30:25+00:00","mainEntityOfPage":{"@id":"https:\/\/mhgoldberg.com\/blog\/?p=9566"},"wordCount":453,"commentCount":0,"publisher":{"@id":"https:\/\/mhgoldberg.com\/blog\/#organization"},"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/mhgoldberg.com\/blog\/?p=9566#respond"]}]},{"@type":"WebPage","@id":"https:\/\/mhgoldberg.com\/blog\/?p=9566","url":"https:\/\/mhgoldberg.com\/blog\/?p=9566","name":"Enforcing privacy in Canada &#8226; Telecom Trends","isPartOf":{"@id":"https:\/\/mhgoldberg.com\/blog\/#website"},"datePublished":"2016-08-23T16:07:25+00:00","dateModified":"2016-08-23T17:30:25+00:00","description":"Canada's Office of the Privacy Commissioner has issued its report on the customer information data breach for Ashley Madison discovered in July, 2015. The &#8226; August 23, 2016","inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/mhgoldberg.com\/blog\/?p=9566"]}]},{"@type":"WebSite","@id":"https:\/\/mhgoldberg.com\/blog\/#website","url":"https:\/\/mhgoldberg.com\/blog\/","name":"Telecom Trends","description":"A Canadian perspective on trends in telecom","publisher":{"@id":"https:\/\/mhgoldberg.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/mhgoldberg.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/mhgoldberg.com\/blog\/#organization","name":"Mark H Goldberg & Associates Inc.","url":"https:\/\/mhgoldberg.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/mhgoldberg.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/mhgoldberg.com\/blog\/wp-content\/uploads\/2021\/02\/mark_logo_png.png","contentUrl":"https:\/\/mhgoldberg.com\/blog\/wp-content\/uploads\/2021\/02\/mark_logo_png.png","width":3484,"height":1444,"caption":"Mark H Goldberg & Associates Inc."},"image":{"@id":"https:\/\/mhgoldberg.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/mark_goldberg"]},{"@type":"Person","@id":"https:\/\/mhgoldberg.com\/blog\/#\/schema\/person\/7a2b80bac06ee3d5cacca8c7708bfe8f","name":"Mark","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/351a7c78c378da7db6aac956985487573ab74c25cb83c460c715fa6d0fcfa7d2?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/351a7c78c378da7db6aac956985487573ab74c25cb83c460c715fa6d0fcfa7d2?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/351a7c78c378da7db6aac956985487573ab74c25cb83c460c715fa6d0fcfa7d2?s=96&d=mm&r=g","caption":"Mark"},"description":"Mark Goldberg has more than 40 years of international experience in strategic planning, managing, designing and implementing telecommunications carrier networks.","sameAs":["http:\/\/www.mhgoldberg.com","https:\/\/x.com\/mark_goldberg"]}]}},"uagb_featured_image_src":{"full":false,"thumbnail":false,"medium":false,"medium_large":false,"large":false,"1536x1536":false,"2048x2048":false,"tenweb_optimizer_mobile":false,"tenweb_optimizer_tablet":false},"uagb_author_info":{"display_name":"Mark","author_link":"https:\/\/mhgoldberg.com\/blog\/?author=1"},"uagb_comment_info":0,"uagb_excerpt":"Canada&#8217;s Office of the Privacy Commissioner has issued its report on the customer information data breach for Ashley Madison discovered in July, 2015. The Privacy Commissioner&#8217;s office launched its investigation a month later, under Canada&#8217;s Personal Information Protection and Electronic Documents Act (PIPEDA). Canada&#8217;s Privacy Commission worked together with Australia&#8217;s Information Commission, which also issued&hellip;","_links":{"self":[{"href":"https:\/\/mhgoldberg.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/9566","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mhgoldberg.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mhgoldberg.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mhgoldberg.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mhgoldberg.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=9566"}],"version-history":[{"count":0,"href":"https:\/\/mhgoldberg.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/9566\/revisions"}],"wp:attachment":[{"href":"https:\/\/mhgoldberg.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=9566"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mhgoldberg.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=9566"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mhgoldberg.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=9566"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}