The Supreme Court of Canada has postponed its decision on a significant privacy case involving Facebook’s association with the Cambridge Analytica scandal from the 2010s. After a one-day hearing in Ottawa, the highest court reserved its judgment, focusing on whether Facebook adequately obtained consent from users before collecting, using, and sharing their personal information with third-party apps. The court also assessed whether the tech company took sufficient measures to protect user data.
Facebook is appealing a 2024 ruling by the Federal Court of Appeal, which found that the company, now known as Meta, violated federal privacy laws by failing to adequately inform users about data risks. This decision overturned a 2023 judgment by the Federal Court that had ruled in favor of Facebook.
Representing the Office of the Privacy Commissioner of Canada, Colleen Bauman emphasized the importance of ensuring that individuals have control over their social media engagement. The Privacy Commissioner’s investigation into Facebook began in 2019 after a complaint regarding the company’s compliance with federal privacy laws, leading to the conclusion that Facebook had breached the regulations.
Privacy law specialist David Fraser highlighted the potential impact of this case on how companies in Canada obtain consent and manage data. He pointed out the broader implications for platforms like the Apple App Store in terms of their responsibility to oversee the multitude of apps on their platform.
The case originates from the infamous Cambridge Analytica data scandal, where the political consulting firm improperly harvested personal data from millions of Facebook users for political advertising without consent. The data collection extended beyond users of the quiz app to their Facebook friends, affecting over 600,000 Canadians, according to Facebook’s estimates.
Law professor Michael Geist from the University of Ottawa underscored the need for clarity and enforcement in Canadian privacy laws, calling for legislative updates to address the longstanding inadequacies in current regulations. Geist urged Parliament to take action before the court’s final decision, which may still be months away.
Overall, the case serves as a catalyst for addressing deficiencies in Canadian privacy legislation, emphasizing the urgency of modernizing regulations that have remained largely unchanged for over two decades.
