Feeds

Top Canadian court: Cops need warrant to get names from ISPs

Decision could scupper nascent cyberbullying, privacy bills

Bridging the IT gap between rising business demands and ageing tools

Canadian ISPs can no longer simply hand over customer information without a warrant after the country’s Supreme Court ruled that internet users were entitled to a "reasonable" expectation of privacy.

The decision means that internet service providers can no longer disclose the names, addresses and phone numbers of their customers to law enforcement voluntarily, and cops will instead be required to get a warrant for the data.

The ruling stems from the case of Matthew David Spencer, who appealed his conviction for possession of child pornography after police officers tracked him down through an IP address. The cops knew the IP address associated with the illegal files and went to Spencer’s ISP to ask it for the associated name and address. Once they got his details, they were able to search his computer, where they found the downloaded files.

Spencer argued that the search of his computer had been unconstitutional and that his right to privacy had been violated, pursuing the case through the court of appeal and on to the Supreme Court. The top court ruled that internet users had a "reasonable expectation of privacy" from their ISPs, but did not overturn Spencer’s conviction.

Supreme Court Justice Thomas Cromwell said in the ruling that the police should have obtained a warrant before getting Spencer’s information. But he said that the police had acted in good faith at the time, so the administration of justice would be impaired if the evidence they acquired at Spencer’s house was to be thrown out.

“It would be reasonable for an internet user to expect that a simple request by police would not trigger an obligation to disclose personal information or defeat (the Personal Information Protection and Electronic Documents Act) PIPEDA’s general prohibition on the disclosure of personal information without consent,” he said.

“The police, however, were acting by what they reasonably thought were lawful means to pursue an important law enforcement purpose. The nature of the police conduct in this case would not tend to bring the administration of justice into disrepute.

“Society has a strong interest in the adjudication of the case and also in ensuring the justice system remains above reproach in its treatment of those charged with these serious offences. Balancing the three factors, the exclusion of the evidence rather than its admission would bring the administration of justice into disrepute.”

Further implications

The Canadian Civil Liberties Association (CCLA) said in a statement that the ruling clarified a longstanding dispute over whether PIPEDA allowed police to obtain subscriber info without a warrant. The association is trying to get parts of PIPEDA declared unconstitutional for privacy reasons.

“The implications of the decision are substantial, and may play a significant role in CCLA’s ongoing Charter challenge to PIPEDA,” the association said. “In particular, the Court’s decision confirms CCLA’s view that PIPEDA is legislation to protect privacy, and cannot be used to undermine it.”

The decision may also affect two government bills, one intended to crack down on cyberbullying (C-13) and the other designed to update PIPEDA. The bill updating the privacy act currently includes provision that would make it easier for police to get subscriber info without a warrant, which could now be unlawful.

The cyberbullying bill has elements that would give law enforcement easier access to the metadata that ISPs and phone companies keep on calls and emails.

The Canadian government said in its parliament on Friday that it was reviewing the decision. Opposition MP Peter Julian (New Democratic Party) challenged the sitting Conservative Party of Canada government on the ruling, saying that it showed that his party and privacy experts had been right all along.

“This morning, the Supreme Court ruled what the NDP and privacy experts had been warning all along, that allowing police to pull private information from telephone companies without warrant was unconstitutional. Yet the Conservatives are steamrolling ahead with (the cyberbullying) Bill C-13, which also allows unconstitutional spying on Canadians,” he said.

“With yet another bill struck down by the Supreme Court, when will the Conservatives finally take a balanced approach that keeps Canadians secure without infringing on constitutional rights?” he asked.

Bob Dechert, parliamentary secretary to the minister of justice, said the government was looking at the ruling.

“We have just received the decision and we will review it. In addition, we will continue to crack down on cyberbullies and online criminals who work against and make our children and all Canadians unsafe. We will keep Canadians safe,” he said. ®

The Power of One Brief: Top reasons to choose HP BladeSystem

More from The Register

next story
BBC goes offline in MASSIVE COCKUP: Stephen Fry partly muzzled
Auntie tight-lipped as major outage rolls on
iPad? More like iFAD: We reveal why Apple ran off to IBM
But never fear fanbois, you're still lapping up iPhones, Macs
Nadella: Apps must run on ALL WINDOWS – PCs, slabs and mobes
Phone egg, meet desktop chicken - your mother
HP, Microsoft prove it again: Big Business doesn't create jobs
SMEs get lip service - what they need is dinner at the Club
ITC: Seagate and LSI can infringe Realtek patents because Realtek isn't in the US
Land of the (get off scot) free, when it's a foreign owner
White? Male? You work in tech? Let us guess ... Twitter? We KNEW it!
Grim diversity numbers dumped alongside Facebook earnings
Dude, you're getting a Dell – with BITCOIN: IT giant slurps cryptocash
1. Buy PC with Bitcoin. 2. Mine more coins. 3. Goto step 1
There's NOTHING on TV in Europe – American video DOMINATES
Even France's mega subsidies don't stop US content onslaught
You! Pirate! Stop pirating, or we shall admonish you politely. Repeatedly, if necessary
And we shall go about telling people you smell. No, not really
prev story

Whitepapers

Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
How modern custom applications can spur business growth
Learn how to create, deploy and manage custom applications without consuming or expanding the need for scarce, expensive IT resources.
Reducing security risks from open source software
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.