Canadian Internet service providers need to be more upfront with the customers on how they are handling private data, according to report released today by the University of Toronto.
The report titled: Keeping Internet Users in the Know or in the Dark, found that independent ISPs tended to be more transparent than their larger counterparts but concluded that there is still a lot of room for improvement in the industry.
“We’ve just seen that in 99 per cent of Canadian Border Services Agency’s request for subscriber information telecom companies have turned this sensitive data over without a warrant,” said Professor Andrew Clement of the Faculty of Information of the U of T. “Internet providers must be held accountable to the Canadian public on for how they handle our personal information.”
Clement and Dr, Jonathan Obar spearheaded the project which studied 20 ISPs.
The report was written by interactive Internet maps project IXmaps.ca of U of T and the New Transparency Projects funded by the Social Sciences and Humanities Research Council of Canada, credits smaller ISPs for being more transparent about their privacy protection policies and form “more visibly keeping domestic Canadian Internet traffic within Canada.”
The report, ranked the ISPs based on 10 transparency criteria which includes:
- Commitment to the Personal Information Protection and Electronic Documents Act (PIPEDA)
- Commitment to inform users about data requests
- Transparency about data request and transfers
- Transparency about conditions for data transfers
- Inclusive definition of “personal information
- Stating data retention periods
- Stating where data is stored
- Stating where data is routed
- Avoiding U.S. routing of Canadian data
- Open advocacy for user privacy rights.
Overall, Chatam, Ont.-based residential and business telecommunications firm TekSavvy Solutions Inc. topped the charts with 3 1/2 stars (one for commitment to PIPEDA, one for avoiding routing data to the U.S., ½ star for informing users about data request, ½ star for being transparent about conditions for data transfers and ½ star for advocacy of user privacy rights).
TekSavvy was followed by Primus (three stars).
Most of the smaller ISPs received 2 ½ stars.
Bell received 1 ½ star, Rogers got one star and Telus received two stars.
To view the table click here
“Canadian can use this chart to see how their provider compares with others,” a statement from the report authors said.“The ISP star ratings can also be seen in relation to one’s personal Internet traffic using the Explore feature of the IXmaps.cap Internet mapping site.
“It’s clear from these detailed findings that smaller providers are more transparent about the measures they take to protect customer privacy,” said Steve Anderson , executive director of OpenMedia.ca. “Nevertheless, all Internet providers have plenty of room for improvement.” The report makes the following recommendations:
- ISPs should make public detailed information about their commitment to being transparent about when, why, and how they transfer private customer information to the state and other third parties
- The federal Privacy Commissioner and Canadian Radio-television and Telecommunications Commission should more closely oversee ISPs to ensure their data privacy transparency, and in particular that they only hand off Internet traffic to carriers with comparable privacy protections as those in Canadian privacy law
- Legislators should reform privacy laws to include robust transparency norms