From IP to ID: the Danger of Joining the Dots

August 27, 2014

The Supreme Court of Canada’s recently-issued decision in R. v. Spencer addressed the narrow question of whether the identification by police of pornographic files on a specific person’s computer, following disclosure by his Internet Service Provider (ISP) of the information associated with his IP address, especially his name and address, amounted to a warrantless search.

The Facts

Taken in isolation, the conclusion that, in response to a police request not backed by a warrant, the disclosure by Shaw of the subscriber name and address which matched Mr. Spencer’s IP (and subsequent search) was unlawful, may appear a narrow point, most applicable to law enforcement in the digital age.  The decision certainly raises policy issues for the government, and Michael Geist’s blog is an excellent resource for further research.

The Decision

The court concluded that it was reasonable to expect the subscriber information – the link between the IP and the individual with which it was associated – would be kept private.  The court underlined that while the information revealed might appear inconsequential, an IP address, which may then be tied to an individual, might be used to reveal far greater information about the individual and their online activities:

“The disclosure of this information will often amount to the identification of a user with intimate or sensitive activities being carried out online, usually on the understanding that these activities would be anonymous” [at para. 66]

Lessons Learned

The point which may be more relevant to businesses which are not typically subject to requests of this nature from law enforcement, is underlining the degree to which the personal information of identifiable individuals is to be protected.  The decision notes that the “collection, use and disclosure” of personal information of subscribers is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA) and that sharing it without the subscriber’s consent may only follow a request from a government institution with “lawful authority.”  The warrantless request did not constitute such authority.

Considerable time was spent underlining anonymity as a component of privacy, and businesses plying their trade online would be well-advised to respect this finding.  Controls, both physical and digital, may be necessary to prevent access to information of this kind (in addition to avoiding its voluntary disclosure), wherever information linking the digital fingerprint of an online visitor to their real-world identity may be stored.

Please visit the link below for a complete copy of the decision:
R. v. Spencer, 2014 SCC 43 (CanLII)

Related Articles

Breaking Glass Ceilings – Federal Pay Equity Legislation Seeks Equal Pay for Equal Value

On September 10, 2019, the federal government announced the appointment of the first ever federal Pay Equity Commissioner. The Pay Equity Commissioner’s role is to provide leadership and direction for the administration and enforcement of the new federal Pay Equity Act (the “Act”). The Act establishes a new pay equity regime which is aimed at reducing gender based pay discrimination by ensuring all federally regulated employers take proactive steps to ensure they are providing equal pay for equal value.

read more

Atlantic pilot program fast track to East Coast immigration

The Atlantic Immigration Pilot Program (AIPP) offers a fast route for employers wishing to hire immigrants and for people wishing to immigrate to Atlantic Canada. The AIPP has recently been extended until December 2021. The AIPP is an employer-driven program that allows Atlantic Canadian employers looking to fill labour gaps with applicants who meet their […]

read more

Nova Scotia Restructuring Offers New Model for Consolidation

This article was first published in Municipal World, Canada’s municipal magazine. NS Restructuring Offers New Model for Consolidation Nova Scotia’s first municipal consolidation in over 20 years is gaining attention as, potentially, a new model for consolidating two already stable and viable municipalities that are convinced they can achieve even more by coming together. The […]

read more
view all
Cox & Palmer publications are intended to provide information of a general nature only and not legal advice. The information presented is current to the date of publication and may be subject to change following the publication date.