On May 19, 2020 the Competition Bureau announced that as part of a registered settlement, Facebook Inc. will pay a $9 million penalty plus an additional $500,000 for the costs of the Bureau’s investigation. The investigation by the Bureau took into account Facebook’s practices between August 2012 and June 2018 and concluded that Facebook made false or misleading claims about the privacy of Canadians’ personal information on Facebook and Messenger. Specifically, the Bureau found that Facebook gave users the impression that by using its privacy features, users could control who could see and access their personal information on the platform; however, Facebook did not actually limit the sharing of user’s personal information (e.g., content posted on Facebook, messages exchanged between users through Messenger) with some third-party developers in a way that was consistent with its privacy claims. Further, Facebook allowed certain third-party developers to access the personal information of users’ friends following the installation of certain third-party apps. Facebook claimed to have stopped such access in April 2015; however, the practice continued with some third-party developers until 2018.
These practices were also the subject of a 2018-2019 joint investigation by the Privacy Commissioner of Canada and the Information and Privacy Commissioner for British Columbia. Among other things, it was found that Facebook failed to obtain meaningful consent from users and from friends of users. On February 6, 2020, the Privacy Commissioner of Canada announced it had filed a Notice of Application in the Federal Court seeking a declaration that Facebook has contravened the Personal Information Protection and Electronic Documents Act, Canada’s federal privacy sector privacy law, together with various orders that would require Facebook to correct its privacy practices. The Privacy Commissioner of Canada does not have direct enforcement powers (although it has asked for legislative reform to give it the power to make orders and issue fines); however, among other powers, the Federal Court can impose binding orders which require an organization to correct or change its practices to be in compliance with the law.
Please log in to read the full article.