The incident caused the province to issue a warning letter to 90 people whose data may have been compromised. Shutterstock
When should your internet provider be able to give police the name and street address attached to your internet address without a warrant?
Canada's top court is set to release its decision on that today, something that could have implications for the government's proposed cyberbullying legislation.
The Supreme Court of Canada is deciding on whether to accept the appeal of Matthew David Spencer of Saskatchewan, who says his rights were violated when his internet provider gave police the real identity attached to his IP address, a series of numbers representing a person's internet identity.
Spencer was charged and convicted of possession of child pornography after a police officer saw files being downloaded to his IP address. The police officer went to Spencer's internet service provider, Shaw, and asked for the real identity of the customer attached to the IP address. The police officer did not have a warrant, but was given the address of Spencer's sister, allowing police to track him down.
Spencer appealed the decision. The Court of Appeal ruled there is no reasonable expectation of privacy for basic internet subscriber information, prompting Spencer to appeal to the Supreme Court.
Spencer's lawyers say the disclosure of subscriber information by the internet service provider was a violation of his right to be protected from unlawful search and seizure under the Canadian Charter of Rights and Freedoms.
If the high court agrees with Spencer's lawyers, the decision could scuttle a portion of the Tories' cyberbullying bill, which critics say will encourage companies to give police more information about customers' online activities without a warrant.
David Fraser, a privacy lawyer with the Halifax firm McInnes Cooper, is watching the case in the hopes that it will provide some clarity about internet privacy rights.
The court is hopefully going to consider to what extent and under what circumstances police can go to your internet service provider and say, "Hey unmask this individual who we've seen doing whatever online and connect that IP address with an actual identity," he said.
Normally, most of our activities on the internet are anonymous because only our IP addresses and not our real identities are publicly visible.
Privacy on internet vs. real world
Fraser said that is comparable to what happens in the real world.
"You and I can go into a library and peruse whatever books related to sensitive health information, health conditions without having to identify yourself," he said, "but as soon as you go on a website related to those sorts of things, you expose your IP address and the only thing that prevents your IP address being connected to you as a person is your internet service provider."
Fraser said it may be easy to dismiss the privacy rights of those involved in unsavoury crimes.
"But looking at it from the bigger picture, those exact same rights that protect the privacy of an accused in a criminal case are the exact same rights that protect my privacy and your privacy."
Disclosure of customer information without a warrant is allowed under some circumstances under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), which governs the collection and handling of personal information by the private sector. However, that part of the law is facing a constitutional challenge from the Canadian Civil Liberties Association.
Rogers Communications released a report last week showing that it received almost 175,000 requests for information about its customers from government and police agencies last year.
In March, the Chronicle Herald newspaper in Halifax reported the Canada Border Services Agency alone accessed telecom customer data almost 19,000 times in one year — and without a warrant more than 99 per cent of the time.
In 2011, the Canadian Wireless Telecommunications Association reported to Canada's privacy commissioner its members received 1.2 million requests for customer information in one year and disclosed information about 780,000 customers.
Britain and the UN's children's agency on Tuesday hosted the first ever "Girl Summit" to mobilise international efforts to end female genital mutilatio... More Britain and the UN's children's agency on Tuesday hosted the first ever "Girl Summit" to mobilise international efforts to end female genital mutilation and child marriage, practices that affect millions of girls around the world. Duration: 00:56
Date 36 mins ago, Duration 0:55, Views 0