Information illegally held by Canadaâs spy agency over the course of a decade should be deleted from CSIS servers, according to Ontarioâs former information and privacy commissioner.
Ann Cavoukian said metadata â the information included in a communication, such as a telephone number or email address â never should have been gathered because it included details on Canadians who didnât pose a security threat.
âAs Justice (Simon) Noel made perfectly clear, there was no authorization whatsoever to collect that type of unrelated metadata. That was completely unanticipated, unauthorized and should never have happened,â she told CTVâs Power Play on Friday.
The Federal Court judge ruled that CSIS should not have kept metadata regarding people who didnât pose a direct threat to national security, and said the agency breached its duty to inform the courts of the data-collection program because the information was gathered under judicial warrants.
The ruling was made public Thursday.
Cavoukian said a major concern about metadata is that it could be crunched by sophisticated algorithms to form data profiles and help track people.
âWhat machine learning algorithms excel at are predictive analytics â predicting future behaviour based on the data collected, and it can paint a very, very deep, involved picture of these individuals,â she said.
âThat was never authorized, and thatâs (why) we have to ensure this information is deleted.â
CSIS has not said whether it plans to destroy the information. CSIS director Michel Coulombe said Thursday that the agency had stopped all access to, and analysis of, the metadata in question as it fully assesses the court decision.
Cavoukian said the spy agencyâs response on Thursday âdidnât address the major concernsâ of the scathing ruling.
âThey said, âOK, weâre not going to do it anymore.â But they didnât say weâre going to destroy the 10 years of metadata that we collected, contrary to having any legal authority to do so,â she said.
In his ruling, Justice Noel suggested thatâs it time for the federal government to revisit the CSIS Act of 1984, which he wrote is "showing its age."
A former director for Canadaâs CSIS watchdog echoed that call for reassessment.
âThe Act is now more than 35 years old,â said Jacques Shore, former director of research and investigation for the Security Intelligence Review Committee (SIRC), who now works as partner with Gowling WLG.
âClearly with new technologies, we have to address it.â
Public Safety Minister Ralph Goodale said Friday he was taking the finding âvery seriouslyâ and following up with CSIS top brass.
â(CSIS) has confirmed to me that it is taking immediate steps to address the courtâs decision,â Goodale said. âIt has blocked all access to, and analysis of, any associated data while it considers its next steps to comply.â