Most data analytics staff worry about number crunching and outputs. But a lawyer has warned IT pros that proposed legislation before Parliament should also be on their minds.<\/p>\n
\u201cUnderstand them and understand what your company needs to do,\u201d Jennifer Davidson told IT World Canada<\/em>\u2018s Analytics Unleashed<\/em><\/a> conference this month. \u201cDon\u2019t leave it to the last minute.\u201d<\/p>\n Davidson, a partner and technology lawyer at Deeth, Williams, Wall LLP<\/a>, was referring to Bill C-27, which introduces the Consumer Privacy Protection Act (CPPA)<\/a> and the Artificial Intelligence and Data Act (AIDA), and Bill-C-26, the Critical Cyber Systems Protection Act.<\/a><\/p>\n If passed, the CPPA will replace the Personal Information Protection and Electronic Documents Act (PIPEDA) with new rules on the collection, use, and disclosure of personal data. Proposed fines for violating the act and its reporting obligations jump to a maximum $25 million, or five per cent of an organization\u2019s gross global revenue, Davidson pointed out.<\/p>\n The new AIDA covers high-impact systems using artificial intelligence, and requires affected firms to, among other things, keep records describing how the system works and the decisions\/recommendations\/predictions it is intended to make. Whoever is responsible for the system has to notify the government if it results in, or is likely to result in, harming people.<\/p>\n Both acts have tough rules for notifying privacy regulators, victims, and possibly others in a firm\u2019s supply chain, she added.<\/p>\n \u201cWhen you look at this act, it\u2019s time to pay attention,\u201d she warned.<\/p>\n C-26 and C-27 are federal laws that apply to all federally-regulated industries, and to the private sectors in Ontario, the Maritime provinces, Saskatchewan, Manitoba, and the Territories, she added. Alberta, British Columbia, and Quebec have their own private-sector privacy laws that have some differences, so data pros in those provinces have to be up on the laws.<\/p>\n Court decisions involving data breaches should also be on the mind of a data controller or data analyst, she added.<\/p>\n She pointed to a recent decision faulting the Insurance Bureau of British Columbia,<\/a> which insures B.C. drivers and vehicles, in the 2012 theft of a list of insured people by an employee, who then sold it to crooks. They used the names in targeted arson and shooting attacks. While the bureau had written policies forbidding unapproved uses of its databases, there was no evidence the bureau had any system or method that would have detected or prevented data theft.<\/p>\n The lesson from this case is \u201cwe need to actively protect data or we (companies) are going to pay the consequences,\u201d Davidson said.<\/p>\n She also urged data pros and security pros to make sure their organization has policies and procedures to safeguard data it holds, and that the firm\u2019s partners are also protecting their IT networks and data.<\/p>\n Analytics Unleashed was sponsored by SAS<\/a>, Informatica<\/a> and Shinydocs<\/a>.<\/p>\n The post Analytics Unleashed: Why Canadian data pros need to watch proposed privacy bills, court decisions<\/a> first appeared on IT World Canada<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":" Most data analytics staff worry about number crunching and outputs. But a lawyer has warned IT pros that proposed legislation before Parliament should also be on their minds. \u201cUnderstand them and understand what your company needs to do,\u201d Jennifer Davidson told IT World Canada\u2018s Analytics Unleashed conference this month. \u201cDon\u2019t leave it to the last<\/p>\n","protected":false},"author":17,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[361,16],"tags":[723,527,703,393,275],"class_list":["post-31786","post","type-post","status-publish","format-standard","hentry","category-privacy","category-security","tag-analytics-unleashed","tag-legislation","tag-privacy-legislation","tag-security-strategies","tag-top-story"],"acf":[],"_links":{"self":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts\/31786","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/comments?post=31786"}],"version-history":[{"count":2,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts\/31786\/revisions"}],"predecessor-version":[{"id":31866,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts\/31786\/revisions\/31866"}],"wp:attachment":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/media?parent=31786"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/categories?post=31786"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/tags?post=31786"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}