The job of a Privacy Commissioner in the 21^st Century is to heighten the value of privacy in a global society where security, trade, technology and consumer expectations have created a volatile atmosphere for our personal information. 

This is no small undertaking.  These intensifying threats to privacy keep the dedicated staff of the Office and me extremely busy.

Globalization raises the challenge of trying to find a cross-border privacy language.  Technological advances hold out the promise of greater convenience, but sometimes at a cost to human rights such as privacy and the ability to control our personal information.

Meanwhile, governments and businesses have a seemingly insatiable appetite for personal information. 

Governments appear to believe – mistakenly, I would argue – that the key to national security and public safety is collecting mountains of personal data.  Privacy often receives short shrift as new anti-terrorism and law enforcement initiatives are rolled out.

Personal information has also become a hot commodity in the private sector.   Our names, addresses, purchases, interests, likes and dislikes are recorded, analysed and stored – all so companies can sell us more products and services. 

Adding to our concerns is the fact many businesses fail to adequately protect this sensitive information – leaving it vulnerable to hackers and identity thieves. 

The list of issues that the Office of the Privacy Commissioner deals with on a daily basis – through investigations, for example – will always be a lengthy one.  However, we have identified four top strategic priorities, which will allow us to take a more focused approach to emerging privacy issues over the coming few years.

These priorities are:

Information Technology

While technological advances offer undeniable benefits in terms of convenience and efficiency, they also provide governments and other organizations with the ability to collect, access and manipulate personal data on a scale that was until recent times unimaginable.  The result is an electronic environment of massive and continuous data circulation.  Technology has also become the weapon of choice for fraudsters, who use it to launch spam attacks and invade computers with “spyware.”

We have set a number of goals in this area:

• Build sufficient capacity within the OPC to assess the privacy impact of new information technologies.
• Increase public awareness of technologies with potential impacts on privacy.
• Provide practical guidance to organizations and institutions on the implementation of specific technologies.

National Security

The national security landscape changed dramatically after the terrorist attacks of September 11, 2001.  Many of the national security measures introduced in the wake of that tragic day – the no-fly list, for example – have involved the collection, use and disclosure of personal information.  There is a very real risk for harm when this information is misused or misinterpreted.

Our objectives are to:

• Ensure national security initiatives adequately protect privacy.
• Ensure proper oversight and accountability of national security agencies as it relates to personal information management practices.
• Raise public awareness of the privacy impacts of national security initiatives.

Identity Integrity and Protection / Identity Theft

Identity theft has been called the “Crime of the 21^st Century.” This type of fraud carries not only a major financial cost, but a hefty emotional price for victims.

We are working to:

• Improve personal information management practices of organizations and institutions.
• Raise public awareness among individuals on how to protect their identity.
• Persuade the federal government to take a more coordinated approach to identity protection.

Genetic Information

Advances in genetics have important implications for privacy.  Genetic testing for employment, criminal matters, research, medical care, access to insurance and genetic testing to determine biological relationships all raise significant privacy issues.

Our aims are to:

• Advance research and knowledge to address some of the new challenges posed by genetics in the context of traditional data protection regimes.  These challenges include the right not to know and the concept of privacy in a world where a genetic sample offers information about not only an individual, but also about his or her family members.
• Raise public awareness about the many potential uses of genetic information.

We have set an ambitious agenda for ourselves over the coming few years.  My commitment to Canadians is to be passionate and persistent in defending their privacy rights as we work to address all of these crucial issues.

Jennifer Stoddart
Privacy Commissioner of Canada