CPRA Into CPAA, California Privacy Upgraded

by rossitaUncategorizedPosted on No Comments

The CPRA introduces amendments to the CCPA of existing provisions of Title 1.81.5 of the California Civil Code (currently known as the CCPA and codified at Cal. Civ. Code § 1798.100 et seq) and adds new provisions (related to the establishment California Privacy Protection Agency). It is unclear, however, whether Title 1.81.5 will continue to be known as the CCPA or will instead be known as CPRA effective Jan. 1, 2023.

The CPRA took effect on Dec. 16, 2020, but most of the provisions revising the CCPA won’t become “operative” until Jan. 1, 2023.

Here is a diagram breaking down the two statutes and outlining how the CPRA expands the CPAA.

\"\"

[For additional information, see Bloomberg Law\’s Glossary of Terms for Decoding CCPA/CPRA.]

The California Privacy Protection Agency is a new agency, created by the CPRA, which is vested with “full administrative power, authority, and jurisdiction to implement and enforce” the CCPA. The CPRA transfers rulemaking authority from the California Attorney General to the California Privacy Protection Agency effective July 1, 2021, with final CPRA regulations due by July 1, 2022.

https://news.bloomberglaw.com/bloomberg-law-analysis/analysis-california-privacy-reboot-puts-rights-in-spotlight

La CNESST contribue au non-Respect de l’exigence de télétravail

by rossitaFrançais, Remote Work Privacy, UncategorizedPosted on No Comments

On dirait que la CNESST intervient seulement après un reportage RDI. Il ne suffit pas que le ministre ait dit mille fois que le télétravail est obligatoire. C\’est comme si les inspecteurs de la CNESST venaient de découvrir qu\’il y a une pandémie. Voilà qu\’ils ne sont pas tous sur la même page, notamment celle …

Read more “La CNESST contribue au non-Respect de l’exigence de télétravail”

Canada’s Digital Charter

by rossitaFrançais, UncategorizedPosted on No Comments

The Minister of Innovation, Science and Industry, Navdeep Bains introduces the proposed Digital Charter Implementation Act, 2020, aiming to modernize the framework for the protection of personal information in the private sector. 

This legislation takes a number of important steps to ensure that Canadians will be protected by a modern and responsive law and that innovative businesses will benefit from clear rules, even as technology continues to evolve, including:

  • increasing control and transparency when Canadians’ personal information is handled by companies;
  • giving Canadians the freedom to move their information from one organization to another in a secure manner;
  • ensuring that Canadians have the ability to demand that their information be destroyed;
  • providing the Privacy Commissioner with broad order-making powers, including the ability to force an organization to comply and the ability to order a company to stop collecting data or using personal information; and
  • ensuring the strongest fines among G7 privacy laws—with fines of up to 5% of revenue or $25 million, whichever is greater, for the most serious offences.

https://www.canada.ca/en/innovation-science-economic-development/news/2020/11/new-proposed-law-to-better-protect-canadians-privacy-and-increase-their-control-over-their-data-and-personal-information.html

French version here: https://www.canada.ca/fr/innovation-sciences-developpement-economique/nouvelles/2020/11/nouveau-projet-de-loi-pour-proteger-la-vie-privee-des-canadiens-et-accroitre-leur-controle-sur-leurs-donnees-et-leurs-renseignements-personnels.html

Le ministre de l’Innovation, des Sciences et de l’Industrie, l’honorable Navdeep Bains, a présenté le projet de loi intitulé Loi de 2020 sur la mise en œuvre de la Charte du numérique pour moderniser le cadre de protection des renseignements personnels détenus par le secteur privé.

Ce projet de loi contient un certain nombre de mesures importantes destinées à protéger les Canadiens. Il s’agit de dispositions législatives modernes et adaptées qui visent à fournir aux entreprises innovatrices des règles claires et applicables, même si les technologies continuent d’évoluer. Le projet de loi vise aussi :

  • à accroître les paramètres de contrôle et de transparence lors du traitement des renseignements personnels des Canadiens par les entreprises;
  •  à donner aux Canadiens la liberté de transmettre de manière sécuritaire leurs renseignements d’une organisation à l’autre;
  • à faire en sorte que les Canadiens puissent demander la destruction des renseignements personnels qu’ils ont fournis;
  •  à fournir au Commissaire à la vie privée des pouvoirs étendus pour rendre des ordonnances, notamment pour forcer une organisation à se conformer et pour ordonner à une entreprise de cesser de recueillir des données ou d’utiliser des renseignements personnels;
  • à appliquer, dans le cas des infractions les plus sérieuses, des sanctions pécuniaires parmi les plus sévères au sein des pays du G7 en ce qui a trait aux législations sur la protection de la vie privée. Les sanctions pourront aller jusqu’à 5 % du revenu ou 25 millions de dollars, selon le plus élevé des deux montants.

Public consultation on Canada’s Privacy Act

by rossitaFrançais, UncategorizedPosted on No Comments

Press release by the Canadian government: https://www.canada.ca/en/department-justice/news/2020/11/government-of-canada-launches-public-consultation-on-modernizing-the-privacy-act.html The Privacy Act regulates federal public sector institutions’ collection, use, disclosure, retention, and disposal of information. The Act also gives Canadian citizens, permanent residents, and individuals present in Canada the right to request access to their personal information held by federal government institutions that are subject to the Act. Communiqué …

Read more “Public consultation on Canada’s Privacy Act”

Cubicles Are Back, 9 to 5 is Dead, And Privacy Protection Is In ICU

by rossitaLitigation, Remote Work Privacy, UncategorizedPosted on No Comments

Staggered shifts, driving alone to work (like a cowboy), no more open space offices… Not only were spaces not \”stimulating creativity\”, they were recipes for distraction and potential harassment claims. It is a relief to take a break from office proximity, breathing in each other\’s faces, sneezing on each other\’s hair, invading one another\’s personal space, have someone snoop up on ya under pretext to access the shredder… 19th century is officially out of fashion.

For example, from now on, you have to buy individual staplers (or maybe even cars) to all employees you want physically at the office, limit the use of paper, disinfect bathrooms every 2 hours, check temperature, imagine how much that will cost.

The way online exams are being administered around the world right now, requiring 2 cameras filming exam-takers, full screen access by proctors, and 3 videos per student to document what exactly happened during each individual exam sitting, should be a fair example (tip of the iceberg) of how remote work in this profession is about to unroll. Say hello to technical issues.

It is kind of obvious that the remote office may remain the only viable office

After having spent at least two weeks rearranging my physical office space, you know those two decisive walls that the whole world suddenly has access to, I\’ve spent half of past week with Adobe, Google, and other usual friends remotely accessing my computer to fix bugs, because new tech issues arise every time you update an app. I\’ve learned so much about my own OS just by observing tech support do stuff inside. For hours. At times, we fight for mouse control, because I have more efficient ways to access certain features. If something messes up, we retrieve downgraded versions from TimeMachine and start over again. Time travel has its own way to reveal stuff you had completely forgotten about. And then a whole afternoon is gone. You still have to work past midnight to catch up on actual work.

Tech issues are the new normal. Everybody is learning.

Unless it is beginner luck, technical issues on remote platforms are the norm rather than an exception. It is important to give options for technical support whenever you require people to work or sit an exam remotely.

Exams are guaranteed to be filled with bugs

How many equipment checks and simulations did you perform before rolling out your actual event or exam? If the answer is none, then you can safely postpone and start over.

Simulated exams act weird, too

I was on Emond\’s platform this week to answer two sets of 220 questions, barrister exam went perfectly fine, solicitor on the other hand was a mild disaster… You can\’t answer 220 questions without a break, so after a 100 questions, you stop the timer and do lunch or lie down and stare in space to recollect your brain. After I returned from break, I logged back into the system to find that 25 of my answers were completely lost, from Q105 where I left off I was sent back to Q80 and what\’s even freakier, the timer was running the whole time while I was logged out. Never seen anything like this before. I literally cried for 30 seconds while contacting support. This wasn\’t even a real exam.

Bugs are not intentional, but they\’re likely to occur. If there are none, fantastic.

I managed to complete the simulated solicitor exam. I could go quite rapidly through the 25 lost questions, because I had already worked with the facts and deliberated on the answers. Another detail I terribly missed is a highlighter tool. Without one you stare at the facts and commit to memory all the facts and complex interactions.

Surprisingly I passed both, what is even more surprising is that I performed better at solicitor, the exam that made me suffer the most, and I was certain to fail. My brain feels as if it ran a marathon.

You may ignore data, but data won\’t ignore you

Do you even know how many apps share your clients confidential information with 3rd party apps, simply because you were too lazy to opt out in the thousand different ways you were supposed to? It is likely you didn\’t know you had to opt out, because it is not common knowledge. Did you buy work phones and work computers for all your remote employees? If not you may stumble upon some PIPEDA issues such as inadvertent sharing of confidential information.