{"id":110496,"date":"2026-06-18T16:08:32","date_gmt":"2026-06-18T20:08:32","guid":{"rendered":"https:\/\/brocku.ca\/brock-news\/?p=110496"},"modified":"2026-06-18T16:25:12","modified_gmt":"2026-06-18T20:25:12","slug":"privacy-bill-requires-stronger-protection-for-biometric-data-brock-expert","status":"publish","type":"post","link":"https:\/\/brocku.ca\/brock-news\/2026\/06\/privacy-bill-requires-stronger-protection-for-biometric-data-brock-expert\/","title":{"rendered":"Privacy bill requires stronger protection for biometric data: Brock expert"},"content":{"rendered":"<p>The first reading of the Protecting Privacy and Consumer Data Act (Bill C-36) in the House of Commons has reignited public conversations about <a href=\"https:\/\/www.cbc.ca\/news\/politics\/ask-private-company-delete-information-legislation-9.7236343\" target=\"_blank\" rel=\"noopener\" data-outlook-id=\"38ed8d33-ab37-4b24-9d73-147d4589aae2\">artificial intelligence (AI) deepfakes<\/a>, surveillance pricing and other ways technology platforms use private data from Canadians.<\/p>\n<p>For data and privacy expert Karen Louise Smith in Brock University\u2019s Department of Communication, Popular Culture and Film, the brief definition of biometric information in the bill\u2019s current text doesn\u2019t adequately address the risks associated with this type of information.<\/p>\n<p>Biometric data includes any physical or behavioural information that can be used to identify someone, including a fingerprint, their facial structure or a voiceprint. Even a person\u2019s gait or brainwaves can be extracted and used for identification.<\/p>\n<p>With these and many other forms of biometric data being captured by technology firms daily, Smith says many people are unaware of how this identifying data can be used and why it is so important to protect it.<\/p>\n<div id=\"attachment_110499\" style=\"width: 361px\" class=\"wp-caption alignright\"><a href=\"https:\/\/brocku.ca\/brock-news\/wp-content\/uploads\/2026\/06\/DSC_0627-copy-scaled.jpg\"><img aria-describedby=\"caption-attachment-110499\" decoding=\"async\" loading=\"lazy\" class=\"wp-image-110499\" src=\"https:\/\/brocku.ca\/brock-news\/wp-content\/uploads\/2026\/06\/DSC_0627-copy-1050x700.jpg\" alt=\"Karen Louise Smith in a striped dress near in front of a tree.\" width=\"351\" height=\"234\" \/><\/a><p id=\"caption-attachment-110499\" class=\"wp-caption-text\">Associate Professor of Communication, Popular Culture and Film Karen Louise Smith<\/p><\/div>\n<p>\u201cWhile Bill C-36 lists biometric data as sensitive, I was surprised that it didn\u2019t receive much attention in the draft bill,\u201d Smith says. \u201cThe current language also lacks specificity around the forms of data from which biometrics can be derived.\u201d<\/p>\n<p>Clear definitions and regulatory guidance are essential to protect Canadians using private services because those services are expected to abide by local laws.<\/p>\n<p>\u201cVarious software vendors and companies that process our data will state in privacy policies that data may be considered biometric in some jurisdictions or reference the fact that they comply with data protection legislation in a given region,\u201d she explains. \u201cTherefore, a clear definition is beneficial to the public interest.\u201d<\/p>\n<p>Smith\u2019s <a href=\"https:\/\/utoronto.scholaris.ca\/server\/api\/core\/bitstreams\/6cf2e5d6-0b54-4e33-8c45-6ae49384eb79\/content\" target=\"_blank\" rel=\"noopener\" data-outlook-id=\"46cf736c-2d2b-44f9-8ab7-f93495a39ce4\">work related to privacy and biometrics<\/a>\u00a0has focused on the urgent need to treat children\u2019s data as sensitive, which she was pleased to see reflected in the bill. However, she also believes much remains at stake for Canadians of all ages.<\/p>\n<p>\u201cIt\u2019s my opinion that we need to be incredibly careful with videos, voice data and also behavioural data,\u201d she says. \u201cIt\u2019s reasonable to presume that biometrics could be derived from those formats in many cases. Many businesses position that data as the fuel for smart, AI-powered algorithms.\u201d<\/p>\n<p>Smith says the importance of regulation around biometric data extraction is closely connected to the government\u2019s newly announced AI strategy, which articulates the need for modernizing privacy laws to reflect the risks associated with AI training and usage.<\/p>\n<p>\u201cWith Canada\u2019s National AI Strategy: AI for All, the government hopes to set a path towards safe, trustworthy AI that doesn\u2019t perpetuate biases,\u201d she says. \u201cMultiple issues and incidents have shown that AI can be biased in various ways, such as certain kinds of facial recognition technologies that display racial or ability-based biases.\u201d<\/p>\n<p>For Smith, the desire for trustworthy AI is closely tied to how biometric data is extracted and used, especially as more routine tasks at work and in schools involve the collection of video and audio files as well as behavioural data. Many online users, she says, are likely unaware intensive monitoring of clicks, keystrokes and other digital interactions can be used to identify them.<\/p>\n<p>She says these files can become vulnerable unless legislation requires a high standard of protection due to the data\u2019s sensitive nature.<\/p>\n<p>\u201cImagine a university student from one of my classes submits their resum\u00e9 and a five-minute video introduction as part of an application to a company for a summer job,\u201d she says. \u201cIf the company\u2019s job application portal gets hacked, my student\u2019s application \u2014 including their name, address and a video of them speaking \u2014 is potentially part of the data breach. I\u2019m curious to know how regulators will respond to the risks of biometrics being derived from video data that gets stolen by hackers?\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The first reading of the Protecting Privacy and Consumer Data Act (Bill C-36) in the House of Commons has reignited public conversations about artificial intelligence (AI) deepfakes, surveillance pricing and other ways technology platforms use private data from Canadians.\u00a0<\/p>\n","protected":false},"author":27,"featured_media":110498,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[4767,1,38],"tags":[153,522,4293],"_links":{"self":[{"href":"https:\/\/brocku.ca\/brock-news\/wp-json\/wp\/v2\/posts\/110496"}],"collection":[{"href":"https:\/\/brocku.ca\/brock-news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/brocku.ca\/brock-news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/brocku.ca\/brock-news\/wp-json\/wp\/v2\/users\/27"}],"replies":[{"embeddable":true,"href":"https:\/\/brocku.ca\/brock-news\/wp-json\/wp\/v2\/comments?post=110496"}],"version-history":[{"count":3,"href":"https:\/\/brocku.ca\/brock-news\/wp-json\/wp\/v2\/posts\/110496\/revisions"}],"predecessor-version":[{"id":110501,"href":"https:\/\/brocku.ca\/brock-news\/wp-json\/wp\/v2\/posts\/110496\/revisions\/110501"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/brocku.ca\/brock-news\/wp-json\/wp\/v2\/media\/110498"}],"wp:attachment":[{"href":"https:\/\/brocku.ca\/brock-news\/wp-json\/wp\/v2\/media?parent=110496"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/brocku.ca\/brock-news\/wp-json\/wp\/v2\/categories?post=110496"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/brocku.ca\/brock-news\/wp-json\/wp\/v2\/tags?post=110496"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}