OTTAWA, Ontario (AP) — Canada’s privacy czar is taking Facebook to court after finding the social media giant’s lax practices allowed personal information to be used for political purposes.
A joint report from privacy commissioner Daniel Therrien and his British Columbia counterpart released Thursday says it uncovered major shortcomings in Facebook’s procedures and called for stronger laws to protect Canadians.
The commissioners expressed dismay that Facebook had rebuffed their findings and recommendations.
Facebook insists it took the investigation seriously. The social media giant says it offered to enter into a compliance agreement.
The Canadian report comes as Ireland’s privacy regulator says it’s investigating Facebook over the social media giant’s recent revelation that it had left hundreds of millions of user passwords exposed.
The Canadian probe followed reports that Facebook let an outside organization use an app to access users’ personal information, and that some of the data was then passed to others. Recipients of the information included the firm Cambridge Analytica.
The app, at one point known as “This is Your Digital Life,” encouraged users to complete a personality quiz but collected much more information about the people who installed the app as well as data about their Facebook friends, the commissioners said.
About 300,000 Facebook users worldwide added the app, leading to the potential disclosure of the personal information of approximately 87 million others, including more than 600,000 Canadians, the report said.
The commissioners concluded that Facebook broke Canada’s privacy law governing companies by failing to obtain valid and meaningful consent of installing users and their friends, and that it had “inadequate safeguards” to protect user information.
Despite its public acknowledgment of a “major breach of trust” in the Cambridge Analytica scandal, Facebook disputes the report’s findings and refuses to implement recommendations, the commissioners said.
“Facebook’s refusal to act responsibly is deeply troubling given the vast amount of sensitive information people have entrusted to this company,” Therrien said. “The company’s privacy framework was empty.”
Therrien reiterated his longstanding call for the Canadian government to give him authority to issue binding orders to companies and levy fines for non-compliance with the law. In addition, he wants powers to inspect the practices of organizations.
The office of Innovation Minister Navdeep Bains, the Cabinet member responsible for Canada’s private-sector privacy law, said the government would take concrete actions on privacy in coming weeks.
Facebook Canada spokeswoman Erin Taylor said the company was disappointed Therrien considers the issues unresolved.
“There’s no evidence that Canadians’ data was shared with Cambridge Analytica, and we’ve made dramatic improvements to our platform to protect people’s personal information,” Taylor said.
“We understand our responsibility to protect people’s personal information, which is why we’ve proactively taken important steps toward tackling a number of issues raised in the report.”
If the application to Federal Court is successful, it could lead to modest fines and an order for Facebook to revamp its privacy practices, Therrien said.
Add Comment