<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p><font size="+1"><font face="Lucida Grande">I think in fact the
California law more closely resembles PIPEDA as it currently
exists. What Ann Cavoukian, former Ontario information and
privacy Commissioner is being quoted on is that she wishes
they had adopted the privacy by design approach. If you look
closely at the PBD handbook, though, it is based on the same
principles. <br>
</font></font></p>
<p><font size="+1"><font face="Lucida Grande">Privacy by Design as a
concept is great....turning it into more detailed prescriptive
standards or even legislative drafting is very difficult. It
could be summed up as think first of privacy, as you build
systems. Here are those PBD principles:</font></font></p>
<div class="parbase resText section">
<div class="res-text richtextContent background-hidden"
id="49a657d8-8abc-4b52-9752-28309eae1c0e"> </div>
</div>
<div class="resReference section">
<div class="resaccordion resAccordion">
<div class="row">
<div class="col-xs-12">
<div class="panel-group accordion"
id="b0f37a5c-92f9-4883-9df0-40104cba39f7" role="tablist">
<div class="panel panel-default">
<div class="panel-heading container-clipboard">
<div class="panel-title"> <a
id="accordion-1501260899479-principle-1--proactive-not-reactive--preventative-not-remedial"
role="tab" data-toggle="collapse"
data-parent="#b0f37a5c-92f9-4883-9df0-40104cba39f7"
href="https://www.ryerson.ca/pbdce/certification/seven-foundational-principles-of-privacy-by-design/#accordion-content-1501260899479-principle-1--proactive-not-reactive--preventative-not-remedial">
Principle 1: Proactive not reactive: preventative
not remedial </a> </div>
</div>
</div>
<div class="panel panel-default">
<div class="panel-heading container-clipboard">
<div class="panel-title"> <a
id="accordion-1501260942528-principle-2--privacy-as-the-default-setting"
role="tab" data-toggle="collapse"
data-parent="#b0f37a5c-92f9-4883-9df0-40104cba39f7"
href="https://www.ryerson.ca/pbdce/certification/seven-foundational-principles-of-privacy-by-design/#accordion-content-1501260942528-principle-2--privacy-as-the-default-setting">
Principle 2: Privacy as the default setting </a>
</div>
</div>
</div>
<div class="panel panel-default">
<div class="panel-heading container-clipboard">
<div class="panel-title"> <a
id="accordion-1501260974666-principle-3--privacy-embedded-into-design"
role="tab" data-toggle="collapse"
data-parent="#b0f37a5c-92f9-4883-9df0-40104cba39f7"
href="https://www.ryerson.ca/pbdce/certification/seven-foundational-principles-of-privacy-by-design/#accordion-content-1501260974666-principle-3--privacy-embedded-into-design">
Principle 3: Privacy embedded into design </a> </div>
</div>
</div>
<div class="panel panel-default">
<div class="panel-heading container-clipboard">
<div class="panel-title"> <a
id="accordion-1501260975425-principle-4--full-functionality--positive-sum--not-zero-sum"
role="tab" data-toggle="collapse"
data-parent="#b0f37a5c-92f9-4883-9df0-40104cba39f7"
href="https://www.ryerson.ca/pbdce/certification/seven-foundational-principles-of-privacy-by-design/#accordion-content-1501260975425-principle-4--full-functionality--positive-sum--not-zero-sum">
Principle 4: Full functionality: positive-sum, not
zero-sum </a> </div>
</div>
</div>
<div class="panel panel-default">
<div class="panel-heading container-clipboard">
<div class="panel-title"> <a
id="accordion-1501260976305-principle-5--end-to-end-security--full-lifecycle-protection"
role="tab" data-toggle="collapse"
data-parent="#b0f37a5c-92f9-4883-9df0-40104cba39f7"
href="https://www.ryerson.ca/pbdce/certification/seven-foundational-principles-of-privacy-by-design/#accordion-content-1501260976305-principle-5--end-to-end-security--full-lifecycle-protection">
Principle 5: End-to-end security: full lifecycle
protection </a> </div>
</div>
</div>
<div class="panel panel-default">
<div class="panel-heading container-clipboard">
<div class="panel-title"> <a
id="accordion-1501260977082-principle-6--visibility-and-transparency--keep-it-open"
role="tab" data-toggle="collapse"
data-parent="#b0f37a5c-92f9-4883-9df0-40104cba39f7"
href="https://www.ryerson.ca/pbdce/certification/seven-foundational-principles-of-privacy-by-design/#accordion-content-1501260977082-principle-6--visibility-and-transparency--keep-it-open">
Principle 6: Visibility and transparency: keep it
open </a> </div>
</div>
</div>
<div class="panel panel-default">
<div class="panel-heading container-clipboard">
<div class="panel-title"> <a
id="accordion-1501260977729-principle-7--respect-for-user-privacy--keep-it-user-centric"
role="tab" data-toggle="collapse"
data-parent="#b0f37a5c-92f9-4883-9df0-40104cba39f7"
href="https://www.ryerson.ca/pbdce/certification/seven-foundational-principles-of-privacy-by-design/#accordion-content-1501260977729-principle-7--respect-for-user-privacy--keep-it-user-centric">
Principle 7: Respect for user privacy: keep it
user-centric </a> </div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<p><font size="+1"><font face="Lucida Grande">All of that is in the
Canadian standards CAN/CSA Q830-96</font></font><font
size="+1"><font face="Lucida Grande">, which is the basis of
PIPEDA. Former Commissioner Cavoukian was a member of that
committee as a whole.</font></font></p>
<p><font size="+1"><font face="Lucida Grande">See her website at
Ryerson for the PBD
<a class="moz-txt-link-freetext" href="https://www.ryerson.ca/pbdce/certification/seven-foundational-principles-of-privacy-by-design/">https://www.ryerson.ca/pbdce/certification/seven-foundational-principles-of-privacy-by-design/</a><br>
</font></font></p>
<p><font size="+1"><font face="Lucida Grande">See the Office of the
Privacy Commissioner of Canada for information about PIPEDA
<a class="moz-txt-link-freetext" href="https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/r_o_p/">https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/r_o_p/</a>
<br>
</font></font></p>
<p><font size="+1"><font face="Lucida Grande">cheers Stephanie
Perrin</font></font><br>
</p>
<div class="moz-cite-prefix">On 2018-07-10 09:19, Sam Lanfranco
wrote:<br>
</div>
<blockquote type="cite" cite="mid:5B44B253.3010906@yorku.ca">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
Here is a short review of the relationship between a U.S. state's
(California's) data protection legislation and the potential
impact on Canada. In this case the impact is minimal since Canada
is looking to even stronger legislation. <br>
<div class="moz-forward-container"> <br>
See: <a moz-do-not-send="true" class="moz-txt-link-freetext"
href="https://www.itbusiness.ca/news/how-does-californias-tough-new-data-privacy-law-affect-canadian-businesses/102690">https://www.itbusiness.ca/news/how-does-californias-tough-new-data-privacy-law-affect-canadian-businesses/102690</a><br>
<br>
The Canadian legislation is drawing on former Ontario Privacy
Commissioner, Privacy By Design architect, and Ryerson
University Privacy by Design Centre of Excellence leader Ann
Cavoukian's <b><i>seven Privacy By Design principles</i></b>
in developing a much-needed update of Canada’s privacy laws.<br>
<br>
Sam Lanfranco<br>
</div>
<br>
</blockquote>
</body>
</html>