Canadaâs electronic spy agency breached privacy rules by sharing certain types of information with its Five Eyes partners, a federal watchdog says.
In his annual report released Thursday, Jean-Pierre Plouffe said the Communications Security Establishment passed on âcertain types of metadata containing Canadian identity informationâ to counterparts in the United States, Britain, Australia and New Zealand, which make up the Five Eyes network.
The report says that information contained in the metadata was ânot being minimized properlyâ before it was shared.
As a result, âCSE proactively suspended the sharing of this metadata with its partners.â
The data sharing practice will remain on hiatus âuntil systems are in place to properly minimize all Canadian identity information,â the office of the CSE Commissioner said in a news release.
, Defence Minister Harjit Sajjan said the metadata âdid not contain names or enough information on its own to identify individuals.â
âTaken together with CSEâs suite of privacy protection measures, the privacy impact was low,â he said.
Sajjan told reporters in Ottawa that the metadata in question was inadvertently shared due to âsoftware deficiencies,â and CSE is working to correct that. He said data-sharing with the Five Eyes network will not resume until he is âsatisfiedâ that proper safeguards are in place to protect Canadiansâ information.
Sajjan said heâs confident that no information was passed on beyond the Five Eyes network, because there is a âsolid agreementâ among the partner countries to safeguard the shared data.
He couldnât say how many Canadians were potentially affected. He said he has been advised that if the government starts digging further into the data, it would be in violation of federal privacy laws itself.
Sajjan said the data collection is done in accordance with the National Defence Act, and is an important part of Canadaâs counter-terrorism and anti-cybercrime efforts.
Public Safety Minister Ralph Goodale said Thursday that the new government is undertaking a âcomplete reviewâ of Canadaâs security intelligence framework, which will include the creation of a âparliamentary mechanismâ to keep spy agencies in check.
He said the objective is to âkeep Canadians safeâ while protecting their privacy.
OpenMedia, a group that advocates for a âsurveillance-freeâ Internet, said Thursdayâs news âclearly underlinesâ the need for stronger oversight of the CSE.
âThe fundamental privacy rights of Canadians must come before the intelligence needs of foreign spy agencies,â Laura Tribe, the groupâs digital rights specialist, said in a statement.
âTodayâs halt to metadata sharing should not be just a temporary pause, but the first step in a wider review of the needs and priorities of information sharing and collection among Canadian and foreign intelligence. No Canadian should need to fear that their private information is being handed to foreign agencies by their own government.â