• About
  • Offices
  • Careers
  • Students
  • Alumni
Background Image
Logo Bennett Jones
  • People
  • Expertise
  • Resources
  • Search
  • Menu
  • Search Mobile
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z All

FEATURED AREAS

Energy
Funds & Finance
Mining
Capital Projects
All Industries
Crisis & Risk Management
Environmental, Social & Governance
Governmental Affairs & Public Policy
All Practices
Insights
Media
Events
Subscribe
COVID-19 Resource Centre
Business Law Talks Podcast
Kickstart
New Energy Economy Series
People
Featured Areas
All Practices
All Industries
About
Offices
Careers
Insights
Events
Search
Search
 
Blog

CRTC Issues $250,000 in Penalties for Malware Distribution

July 11, 2018

Written by Martin P.J. Kratz, QC

Canada’s anti-spam law (CASL) addresses much more than unwanted commercial messages. CASL also prohibits, among other things, installation of software onto a person’s computer without consent. The Canadian Radio-television and Telecommunications Commission (CRTC) exercises enforcement powers in respect of the software provisions of CASL.

The CRTC reported on July 11, 2018, that their chief compliance and enforcement officer has issued Notices of Violation to Datablocks and Sunlight Media for allegedly aiding in the installation of malicious computer programs through the distribution of online advertising. This is the first time the CRTC has taken action against the installation of malicious software through online ads under CASL.

Datablocks and Sunlight Media operate in the online advertising industry. The CRTC advised that online advertisements are a leading means for the distribution of malware. The CRTC reported that Sunlight Media, the ad network, uses Datablocks’ bidding platform to operate as a broker between advertisers and publishers.

The CRTC action included penalties of $100,000 for Datablocks and $150,000 for Sunlight Media. The alleged violations of CASL that the CRTC asserted were that Sunlight Media accepted unverified, anonymous customers who used their services to distribute malware. Then the CRTC alleged that Datablocks provided those anonymous customers of Sunlight Media’s clients with the necessary infrastructure and software to compete in real-time for the placement of their ads. Those ads, however, contained malicious computer programs.

The CRTC identified a number of CASL compliance deficiencies in both Datablocks and Sunlight Media’s operations including that their agreements with customers did not require compliance with CASL, they did not monitor how customers used the service and they did not have CASL compliance policies or procedures in place. The CRTC also alleged that it notified both companies about the cybersecurity issues in 2016 but neither company implemented basic industry cybersecurity safeguards.

Datablocks and Sunlight Media may choose to dispute the penalties and so we may learn more about the details of this case in due course.

The lessons from this enforcement action include that all businesses using online commercial communications should implement CASL compliance policies. That is especially the case for participants in the online advertising industry.

Another important lesson for online service providers is to seek to know your customers and monitor their use of your service. This allows remedial action to be taken should the customers violate the terms of such services and may both protect the service and infrastructure from misuse but also enhance regulatory compliance by the online service provider.

Read the New Energy Economy Series

Related Links

  • Insights
  • Media
  • Subscribe

Recent Posts

Blog

The Rise of ESG Bonds in Corporate Financing

March 02, 2021
       

Blog

Another Reminder of the Low Bar for Class Action Certification [...]

March 01, 2021
       

Blog

Are Gun Manufacturers Liable for Mass Shootings?

March 01, 2021
       

Blog

Evidence of Harm Required To Advance Class Action Following Data Breach

February 24, 2021
       

Blog

Site Rehabilitation Program Periods 5 and 6 Further Expand Program Scope

February 22, 2021
       

The firm that businesses trust with their most complex legal matters.

  • Privacy Policy
  • Disclaimer
  • Terms of Use

© Bennett Jones LLP 2021. All rights reserved. Bennett Jones refers collectively to the Canadian legal practice of Bennett Jones LLP and the international legal practices and consulting activities of various entities which are associated with Bennett Jones LLP

Logo Bennett Jones