Privacy breaches may soon be fined under federal competition law

Under the Competition Act, a corporation can be fined up to $10 million for the first offense

Privacy breaches may soon be fined under federal competition law

Privacy of personal information, currently protected by federal and provincial privacy legislation, may soon be subject to additional safeguards under the federal Competition Act.

According to a blog post by Bennett Jones LLP, a senior official from the Competition Bureau announced in a recent conference that the Bureau plans to impose administrative monetary penalties against organizations making “false or misleading statements about the type of data they collect, why they collect it, and how they will use, maintain and erase it.”

The firm also said that the competition commissioner had previously hinted at this recent development, stating in May 2019 that “the fines for deceptive marketing practices may be appropriate for violations of privacy by app makers.”

While under privacy laws such as the Personal Information Protection and Electronic Documents Act, SC 2000, c 5, a court may award damages in favor of a complainant against an organization found to have breached privacy obligations, no specific monetary penalties are laid down. On the other hand, under the Competition Act, RSC 1985, c C-34, a court may impose a fine on a corporation or individual determined to have engaged in deceptive marketing practices, such as false or misleading representations.

Under the Competition Act, an individual can be assessed an administrative monetary penalty not exceeding $750,000 for the first offense, and not exceeding $1 million for each subsequent offense, while a corporation can be assessed a penalty not exceeding $10 million for the first offense, and not exceeding $15 million for each subsequent offense.

In the blog post, the firm warned that, following this announcement by the Competition Bureau, organizations may be imposed monetary penalties for failure to adhere with the privacy policies found on their websites. The firm added that, even absent such express statements stated in their privacy policies, organizations may still potentially be fined for implied representations to consumers.

Given these stakes, the firm mentioned possible safeguards for organizations to avoid being fined by the Competition Bureau. First, it urged organizations to know the scope of the personal information under their custody or control, and to employ measures to keep the information secure. It then advised organizations to ensure that the ways in which they utilized such information were in accordance with the consent obtained.

Related stories

Free newsletter

The Canadian Legal Newswire is a FREE newsletter that keeps you up to date on news and analysis about the Canadian legal scene. A separate InHouse Edition is delivered on a regular basis, providing targeted news and information of interest to in-house counsel.

Please enter your email address below to subscribe.

Recent articles & video

Excessive speeding, even momentarily, can be departure from reasonable standard of care: SCC

How does the COVID-19 criminal trials shutdown affect Charter rights of those awaiting trial?

COVID-19 layoffs, government benefits pose novel questions for employment lawyers

Legal Report: litigation ‘Green Rush’

B.C.’s Civil Resolution Tribunal keeps ‘doors open’ during pandemic

COVID-19 and the courts: March 27 update

Most Read Articles

COVID-19 and Ontario’s courts

COVID-19: law firms going remote, some restricting access to offices

How COVID-19 is forcing Canadian law schools to transition to online learning

‘No one knows what tomorrow will bring:’ Urgent matters for kids, families persist as pandemic rages