Tag Archives: User tracking

What not to do with employee monitoring software

The British Columbia Information and Privacy Commissioner has published a report strongly criticising The District of Saanich’s use of employee monitoring software, which included keystroke logging, automated regular screen captures and a range of other intrusive features across the District’s IT systems.

The report reminds readers that “employees do not check their privacy rights at the office door”, and goes on to set out the Commissioner’s findings that:

  • The District did collect personal information through its use of monitoring software. In fact, because of how the software was configured, the District collected all personal information that a user entered into their workstation.
  • Under the Freedom of Information and Protection of Privacy Act (FIPPA), which regulates only public bodies, the District did not have the authority to collect the personal information recorded by the monitoring software.
  • The District did not notify employees of the collection of their personal information as required by FIPPA.
  • It could not be determined whether the District used or disclosed personal information collected by the monitoring software in compliance with FIPPA because the District had not activated the functionality to monitor user access through logs that show user activity.

Link (CanLII): Saanich (District) (Re), 2015 BCIPC 15 (Hat-tip: Barry Sookman)

Privacy group asks US FTC to investigate Uber

The Electronic Privacy Information Centre (EPIC) has asked the Federal Trade Commission to investigate Uber’s privacy policy, which permits Uber the right to track users even when they’re not using the Uber app.

In EPIC’s complaint, it says “Uber’s collection of user’s information far exceeds what customers expect from the transportation service.  Users would not expect the company to collect location information when customers are not actively using the app.”

In response, Uber says that users will be able to opt out of the new privacy policy.  However, EPIC says that forcing users to opt out of the data collection “places an unreasonable burden on consumers.”

Link (USA Today): Privacy group asks US FTC to investigate Uber

Belgian privacy commission takes action against Facebook over user tracking

The Belgian Privacy Commission has taken Facebook to court for its alleged failure to comply with European privacy law.  An opinion published by the Belgian privacy watchdog detailed Facebook’s alleged breaches of European privacy law, including tracking the activities of non-Facebook users and logged out Facebook users without their consent for advertising purposes.

Link (The Guardian): Belgian privacy commission takes Facebook to court over privacy breaches and user tracking