Did Dion, Dryden, and Brison Violate Federal Law?

I am not a lawyer, but through my work in the real world have some acquaintance with PIPEDA (The Personal Information Protection and Electronic Documents Act). The way I understand this law as it would apply to shenanigans related to the Liberal Party Membership List as reported here is as follows. In joining the Party, a person is providing certain personal information to the party. Furthermore, the mere fact that they allow themselves to appear on the list conveys personal information--that they are a party Member. They are doing this in the expectation that the Party will use the information only for specific purposes (however those purposes have been explicitly or tacitly defined). To use this information for purposes beyond the definition, the Party, or certain third parties given access to the data by the Party, must essentially approach every person on the list and ask permission to use their personal information before going ahead.

So, the way I see it, unless Dion, Dryden, and etc. contacted every Liberal on the rolls and asked if their data could be turned over to the Globe, then they may be in violation of the Act.

Therefore this latest "scandal" may not be just an issue internal to the Liberal Party, and perhaps, not as trivial a matter as I thought.

Now, as I say, I am not a lawyer, so I may be totally wrong on how the legislation would apply to the current situation. Non-profits, political parties among them, are exempted from certain aspects of PIPEDA. For example, The Party can turn over its list to certain third parties--Leadership candidates among them--so that these candidates can solicit Members for support, donations, and the like. But are Leadership candidates in turn allowed to turn over said list to a commercial entity like the Globe and Mail, which then use it for a commercial purpose (doing a poll and publishing the results so as to sell newspapers)? I don't know.

PIPEDA is complicated, and many of the issues it raises have yet to be tested. Furthermore, it is complaints driven, so if no Liberal Party Member raises an alert with the Privacy Commissioner, nothing happens. However, if they do, The Privacy Commissioner can launch an investigation and dole out punishment.

If anyone wants to look at the legislation, the website of the Office of the Privacy Commissioner of Canada can be found here.