Privacy Commissioner says Facebook violated PIPEDA

Facebook rejected the investigation’s findings and ignored its recommendations, said the announcement.

The OPC’s application asks the Federal Court for the following:

• A declaration that Facebook contravened the Personal Information Protection and Electronic Documents Act (PIPEDA);
• An order requiring Facebook to implement effective, specific and easily accessible measures to obtain, and ensure it maintains, meaningful consent from all users;
• An order requiring Facebook to specify the technical revisions, modifications and amendments to be made to its practices to achieve compliance with PIPEDA;
• An order that the parties follow-up with the court, as well as an order that the court retain jurisdiction for the purposes of ongoing monitoring and enforcement;
• An order prohibiting Facebook from further collecting, using and disclosing any personal information of users in any manner that contravenes PIPEDA; and
• An order requiring Facebook to publish a public notice of any action taken or proposed to be taken to correct its practices that contravene PIPEDA.

A Facebook company spokesperson told Canadian Lawyer there is no evidence Canadian user data was shared with Cambridge Analytica and that the social media company made “many attempts” to work with the privacy watchdog.

“We look forward to defending the many proactive and robust improvements we’ve made to our platform,” the spokesperson said.

The OPC declined Canadian Lawyer’s interview request because the matter is before the courts.