Privacy breaches may soon be fined under federal competition law

Under the Competition Act, a corporation can be fined up to $10 million for the first offense

Privacy breaches may soon be fined under federal competition law

Privacy of personal information, currently protected by federal and provincial privacy legislation, may soon be subject to additional safeguards under the federal Competition Act.

According to a blog post by Bennett Jones LLP, a senior official from the Competition Bureau announced in a recent conference that the Bureau plans to impose administrative monetary penalties against organizations making “false or misleading statements about the type of data they collect, why they collect it, and how they will use, maintain and erase it.”

The firm also said that the competition commissioner had previously hinted at this recent development, stating in May 2019 that “the fines for deceptive marketing practices may be appropriate for violations of privacy by app makers.”

While under privacy laws such as the Personal Information Protection and Electronic Documents Act, SC 2000, c 5, a court may award damages in favor of a complainant against an organization found to have breached privacy obligations, no specific monetary penalties are laid down. On the other hand, under the Competition Act, RSC 1985, c C-34, a court may impose a fine on a corporation or individual determined to have engaged in deceptive marketing practices, such as false or misleading representations.

Under the Competition Act, an individual can be assessed an administrative monetary penalty not exceeding $750,000 for the first offense, and not exceeding $1 million for each subsequent offense, while a corporation can be assessed a penalty not exceeding $10 million for the first offense, and not exceeding $15 million for each subsequent offense.

In the blog post, the firm warned that, following this announcement by the Competition Bureau, organizations may be imposed monetary penalties for failure to adhere with the privacy policies found on their websites. The firm added that, even absent such express statements stated in their privacy policies, organizations may still potentially be fined for implied representations to consumers.

Given these stakes, the firm mentioned possible safeguards for organizations to avoid being fined by the Competition Bureau. First, it urged organizations to know the scope of the personal information under their custody or control, and to employ measures to keep the information secure. It then advised organizations to ensure that the ways in which they utilized such information were in accordance with the consent obtained.

Related stories

Free newsletter

The Canadian Legal Newswire is a FREE newsletter that keeps you up to date on news and analysis about the Canadian legal scene. A separate InHouse Edition is delivered on a regular basis, providing targeted news and information of interest to in-house counsel.

Please enter your email address below to subscribe.

Recent articles & video

Peter MacKay's record on the justice file should be enough to lose him the leadership bid

Innu can pursue claim against mining companies in Quebec courts

DLA Piper launches global cannabis practice…

B.C. Law Society goes after more unauthorized practitioners

Roundup of law firm hires, promotions and departures: Week of Feb. 21

Legislative review panel makes 97 recommendations to reform outdated communications law

Most Read Articles

Peter MacKay's record on the justice file should be enough to lose him the leadership bid

Tax Law Legal Report: Killing the golden goose

Innu can pursue claim against mining companies in Quebec courts

Making meaningful changes to the physical workplace can improve wellbeing