[shahsyed]

Canadian here.

Not sure how there is no government oversight for handling of sensitive data in the first place. I get that we have a "Privacy Commissioner of Canada". But this sort of thing should almost never happen.

Also, how the heck can a privately owned company that deliberately mishandled data (let's be honest here - instead of paying legal fees to fight in court, you could be, I don't know, tightning up your NetSec?) overrule a federally mandated officer?

Holy crap this stinks.

[microcolonel]

Basically the government keeps asking for more centralization, they do it every year. Each year the privacy people in the actual custodians of these data get more and more demoralized, and replaced with yes men.

[0xBeefFed]

Write to your MP. Not that they will do anything - Maybe you'll be luckier than me and wont get a canned response about how they are "working hard to stop this" without taking action.

[shahsyed]

I occasionally do - and there are times where I do get a response back.

I'm considering registering myself as a lobbyist so that I can have more of a face to face contact with councillors in my city, and actually push for more change.

Because right now, if people in tech aren't advocating for better security practices...we're going to doom ourselves by standing by and not doing anything at all.