86% of Canadians Support Requirements to Keep Their Data in Canada
SURVEY RESULTS AND POLICY OPTIONS FROM RYERSON UNIVERSITY SHOW THAT GOVERNMENT MUST PROTECT CANADIAN DATA OUTSIDE BORDERS
TORONTO, Nov. 13, 2020 /CNW/ - Canada needs to take urgent policy action to safeguard Canadians' most sensitive data stored by social media platforms. Without modernized privacy law, Canadians' security and privacy online is at risk. Today, Canadians' social media data can be transferred to countries that do not sufficiently protect individual privacy. In its recent discussion paper and survey, the Cybersecure Policy Exchange at Ryerson University analyzes where current social media companies store Canadian's data, compares international privacy legislation and provides three policy options to enhance Canadian trust and security online.
In its discussion paper, Home Ice Advantage: Securing Data Sovereignty for Canadians on Social Media, Cybersecure Policy Exchange found that:
- Many popular platforms, such as Facebook and TikTok, transfer data to a variety of jurisdictions, and none specifically cite Canada as a country of storage.
- Canadian privacy law does not require users to consent to personal data transfer outside of Canada or require meaningfully enforced limits on transferring to jurisdictions with insufficient protections for surveillance or unauthorized access of Canadians' personal data.
- An overwhelming majority (86%) of Canadians support a requirement to keep their data within Canadian borders.
- On a scale of zero to ten, 49% of Canadians rate their trust of Facebook between zero and three despite it being the most used platform in Canada (69%).
This research demonstrates that most social media platforms' privacy policies do not disclose precisely which jurisdiction they store, process and transfer the personal data of a given user. It also shows that existing protections in Canada have proven inadequate to rapidly changing circumstances outside our borders. The new discussion paper argues that Canada must coordinate an international approach that contributes to greater data sovereignty or else they will get caught in the legal crossfire between Europe, the United States, and China — and Canadians security and privacy online will suffer.
"Canadians are looking for answers on how their private and sensitive data are being protected outside our borders. The federal government has an opportunity to modernize our privacy law to do just that. Canadians should have transparent information to inform their decisions, assurance that the jurisdictions where their data is transferred protect and enforce their rights, and they should have confidence that their most sensitive data will never be compromised," said Sam Andrey, Director of Policy and Research at the Ryerson Leadership Lab.
To help address some of these concerns, the discussion paper also outlines three policy options for the federal government to enhance Canadians' trust and security online.
- Comparable Protection: Provide precise requirements and enforcement to ensure personal data collected and shared through social media receives comparable levels of protection when transferred outside of Canada;
- Consent: Require social media platforms to obtain explicit consent from Canadians for the transfer of their personal data to jurisdictions that do not provide comparable protection as well as provide information about the specific data and countries involved; and
- Sensitive Data: Better define and provide greater security protections for sensitive personal data, such as private messages and biometric data.
With ongoing discussion and consultation on modernization approaches to Canadian privacy law, this discussion paper and set of policy options will help advance policy considerations and position Canada as a leader among its international peers.
The full findings from Home Ice Advantage are available at: https://www.cybersecurepolicy.ca/. An anonymous survey was conducted by Pollara Strategic Insights on behalf of the Cybersecure Policy Exchange online with 2,000 Canadian residents over the age of 18 from May 14 to 22, 2020. As a guideline, a probability sample of this size would yield results accurate to +/- 2 percentage points, 19 times out of 20 (95%).
The Cybersecure Policy Exchange is an initiative from Ryerson University, dedicated to advancing effective and innovative public policy in cybersecurity and digital privacy. The Cybersecure Policy Exchange is powered by RBC through Rogers Cybersecure Catalyst and the Ryerson Leadership Lab.
SOURCE Ryerson University
Sam Andrey, Director of Policy and Research at the Ryerson Leadership Lab, [email protected] or 416-727-0959; Cybersecure Policy Exchange, cybersecurepolicy.ca, @cyberpolicyx, [email protected]
Share this article