OPC Guidance Documents

Data Privacy Day

Data Privacy Day: Putting Privacy in the Spotlight

Top Ten Ways Your Privacy is Threatened

January 28, 2009, is Data Privacy Day. Canada, along with the United States and 27 European countries, will mark this occasion as a means of raising awareness and generating discussion about data privacy practices and rights.

See our new privacy illustrations

I will concede that in terms of important days of the year, this one may not immediately rank high on the list for most people. In fact, I think it is safe to say that today the vast majority of people will go about their day completely unaware of the existence of this occasion.

For more information about Canadian events and how to get involved in Data Privacy Day 2009, visit the Canadian Association of Professional Access and Privacy Administrators (CAPAPA) Web site.

However, most people will also go about their day oblivious to the fact that they are leaving an extensive trail of data behind them for others to collect, merge, analyze, massage and even sell, often without their knowledge or consent. Furthermore, today, millions of people will send sensitive personal information over the Internet; thousands will likely be affected by a data breach, and hundreds will probably fall victim to identity theft.

So why should you care about Data Privacy Day? Because privacy matters.

Privacy is often viewed as a fundamental human right, and arguably, the right from which many other essential freedoms flow—freedom of speech, freedom of association, freedom of thought. Privacy is not just an individual right—it is a public good that reflects decisions we have made as a people about how we want to live as a society.

And it is increasingly under siege.

These days, the list of significant pressures on our privacy is long and varied, but there is no question—the rapid advance of technology is having the most profound impact on both our rights and our notions of privacy.

The Internet is the most obvious technological example. It has revolutionized our lives—and we have only begun to realize its potential. However, the features that make the Internet so attractive – openness, anonymity and global reach – are also potential vulnerabilities.
Public research indicates that many people are uneasy about what happens to their personal information when they go online. And so they should be.

Every day, we see headlines about sophisticated phishing attacks, enormous data breaches, in both the public and private sectors, and the proliferation of identity theft. It is no coincidence that as businesses began to recognize the immense potential of personal data in their efforts to connect with customers, so too did criminals begin to realize its value. They have come to recognize that they can make a lot of money by stealing names, birthdates, credit cards and other personal information. In fact, around the world, cyber crime has become a $105 billion dollar industry, according to the CEO of the security technology company McAfee Inc. Some suggest that’s bigger than the international illegal drug trade!
People need to feel secure when they go online, be it in their capacity as consumers, citizens, workers or students. They need to know their personal information will be protected and that their privacy will be respected.

But there is no simple solution.

Governments at all levels and around the globe need to do more to ensure that they hear, understand and address the concerns citizens have about on-line privacy. While it is impossible to stay ahead of technology, governments need to make every attempt to stay in step with technological developments and introduce laws that inspire consumer trust. Here in Canada, the federal government did take some preliminary steps to address identity theft through legislation during the last session of Parliament, but the complexity and pervasiveness of the issue demands a more comprehensive approach.

Businesses and organizations need to recognize their responsibilities in safeguarding the personal information their customers entrust to them by investing in security systems and training employees about privacy and security policies. They would also do well to think carefully before they collect information. After all, cyber thieves can’t steal personal information if it hasn’t been collected in the first place; and they are far less likely to have the opportunity to steal it if it is only kept for limited periods of time.

As individuals, we need to be more vigilant when divulging our personal information online. Once it is out in the public domain, we can’t control how it is used and we can never get it back. Our personal information is key to our identity, and for the most part, we should have the right to decide who uses it, how they use it and for what purpose.

In particular, we need to educate our youth and encourage them to be prudent when it comes to their privacy. The first truly wired generation of children is growing up, and they are sophisticated and enthusiastic users of new technologies. While the opportunities this technology offers them are tremendous, we must ensure that they also understand the impact that it can have on their privacy, and provide them with the tools and information they need to make smart decisions. We need to teach them to guard their privacy—to value it.

As the Privacy Commissioner of Canada, I am committed to protecting and promoting the privacy rights of Canadians. But in today’s wired world, this national mandate demands a coordinated approach. I firmly believe that protecting privacy, enhancing security and building user confidence are goals that everyone must pursue. This cannot be done on a province-by-province or country-by-country basis—the data flows are too great; the technologies are evolving too rapidly; and the jurisdictional challenges are daunting. The only way to achieve meaningful progress in such a complex environment is to work collectively to find broader solutions.

This is why celebrating Data Privacy Day is important. Recognized by privacy professionals, corporations, government officials, academics and students around the world, today is a day that puts privacy in the spotlight. It is a day that is intended to remind us of the importance and prevalence of data privacy issues in our lives, but it is also meant to incite us to become better guardians of our own personal information.

Jennifer Stoddart
Privacy Commissioner of Canada