• About
  • Offices
  • Careers
  • News
  • Students
  • Alumni
  • Payments
Background Image
Bennett Jones Logo 100 Years
  • People
  • Expertise
  • Knowledge
  • Search
  • Menu
  • Search Mobile
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
View all
Practices
Corporate Litigation Regulatory Tax View all
Industries
Capital Projects Energy Funds & Finance Mining View all
Advisory
Crisis & Risk Management Environmental, Social & Governance (ESG) Governmental Affairs & Public Policy
View Client Work
Insights News Events
New Energy Economy Series COVID-19 Resource Centre Business Law Talks Podcast
Subscribe
Bennett Jones Centennial Menu
People
Practices
Industries
Advisory Services
Client Work
About
Offices
News
Careers
Insights
Law Students
Events
Search
Alumni
Payments
Subscribe

Stay informed on the latest business and legal insights and events.

LinkedIn LinkedIn Twitter Twitter Vimeo Vimeo
 
Blog

Competition Bureau Calls for Increased Fines Under Competition Act for Privacy Violations

May 29, 2020

Written by Ruth Promislow, Michael Whitt and HC Lee

Following the recent fine against Facebook for C$9.5 million under the Competition Act pursuant to allegations that it made "false or misleading claims about the privacy of Canadians' personal information,” the Competition Bureau has called for increased fines for privacy violations.

As we previously reported in Key Takeaways from Competition Bureau Fine for Privacy Violation, the fine (which Facebook agreed to pay without any acknowledgement of wrongdoing) was near the upper range of potential administrative penalties under the Competition Act, which are up to C$10 million and up to C$15 million for each subsequent order against a corporation.

In an interview following the reporting of the fine, the Commissioner of Competition, Matthew Boswell, stated that the Canadian settlement amount was "certainly not in the same ballpark"1 as the settlement that Facebook reached with United States Federal Trade Commission (FTC) earlier this year: US$5 billion. While a multi-billion dollar fine was unprecedented for the FTC, previous FTC fines for privacy violations have well exceeded multiples of the Canadian maximum on several occasions, examples of which include the following:

  1. US$575 million against Equifax in connection with its breach exposing the personal information of 147 million Americans;  
  2. US$170-million fine against Google LLC and its subsidiary YouTube, LLC in connection with collection of personal information directly from users of child-directed websites and online services;   and
  3. US$22.5-million fine against Google Inc. in connection with charges that it engaged in deceptive acts or practices against users by saying that it would not place tracking “cookies” or serve targeted ads to those users.

Canadian Competition Commissioner Mathew Boswell has stated that the penalties under the Competition Act should reflect more than just a cost of doing business. As a point of reference, Facebook reportedly had 23.8 million active Canadian users in 2019, and 24.1 million in 2020.

Legislative amendments would be required to raise the cap on the maximum penalties under the Competition Act. The Competition Bureau is not alone in supporting legislative reform for stiffer penalties against corporations for privacy violations. The Office of the Privacy Commissioner of Canada, which cannot currently impose administrative penalties against an organization for failing to comply with its privacy obligations under the federal Personal Information Protection and Electronic Documents Act (PIPEDA), has called for reform to empower it "to conduct proactive inspections, make binding orders and impose consequential penalties for non-compliance with the law."2

With such calls to action becoming more frequent and in light of the increasing number of high-profile privacy breaches, we anticipate legislative reform in this area. In our last post on this matter, we set out some key issues to consider in managing the risk of regulatory exposure.

For more information regarding how to contain regulatory and litigation exposure arising from the management of personal information, contact the Bennett Jones Privacy and Data Protection group.


1. MLex, Richard Vanderford, "After C$9.5 million Facebook settlement, Canada competition boss calls for law to allow tougher fines" (May 27, 2020).

2. Office of the Privacy Commissioner of Canada, "2018-2019 Annual Report to Parliament on the Privacy Act and the Personal Information Protection and Electronic Documents Act," https://www.priv.gc.ca/en/opc-actions-and-decisions/ar_index/201819/ar_201819.

PDF Download

Authors

  • Ruth E. Promislow Ruth E. Promislow, Partner
  • Hyechan (HC)  Lee Hyechan (HC) Lee, Associate

Bennett Jones Marks 100 Years of Service and Trust

Related Links

  • Insights
  • Media
  • Subscribe

Recent Posts

Blog

UPDATED Canadian Sanctions Targeting Russia, Belarus [...]

June 29, 2022
       

Blog

National Indigenous Economic Strategy Rebuilding Indigenous Economies

June 24, 2022
       

Blog

Achieving Net Zero by 2050: The MMV Plan as a Fundamental [...]

June 23, 2022
       

Blog

Anti-Money Laundering Rules Expanded to Include Payment [...]

June 21, 2022
       

Blog

Alberta Court Declines to Extend Limitation Period [...]

June 20, 2022
       
Bennett Jones Centennial Footer 100 Years
Bennett Jones Centennial Footer 100 Years
About
  • Leadership
  • Diversity
  • Community
  • Innovation
  • Security
  • History
Offices
  • Calgary
  • Edmonton
  • Ottawa
  • Toronto
  • Vancouver
  • New York
Connect
  • Insights
  • News
  • Events
  • Careers
  • Students
  • Alumni
Subscribe

Stay informed on the latest business and legal insights and events.

LinkedIn LinkedIn Twitter Twitter Vimeo Vimeo
© Bennett Jones LLP 2022. All rights reserved.
  • Privacy Policy
  • Disclaimer
  • Terms of Use
Logo Bennett Jones