:
I call this meeting to order.
Welcome to meeting number 119 of the House of Commons Standing Committee on Industry and Technology.
Today’s meeting is taking place in a hybrid format, pursuant to the Standing Orders.
For our first hour, pursuant to the motion adopted on Monday, March 18, 2024, the committee is commencing its study of the development and deployment of ELYSIS technology at Rio Tinto and Alcoa facilities.
I’d like to welcome our witnesses today and thank them for being here, and I apologize in advance for having to interrupt our meeting a little later owing to a scheduled vote in the House.
We are now welcoming two representatives from Rio Tinto: Jérôme Pécresse, chief executive aluminium, and Nigel Steward, chief scientist, who will be joining us by videoconference.
As you know, you have five minutes for your opening statement.
Mr. Pécresse, please begin.
Good afternoon, ladies and gentlemen.
Thank you for this opportunity to be here today to discuss Rio Tinto's commitment to Canada, and more specifically the development of ELYSIS, a revolutionary technology being proudly developed in Quebec's Saguenay—Lac-Saint-Jean region.
I'll begin by introducing myself. My name is Jérôme Pécresse. Six months ago, in October, I was appointed chief executive aluminium at Rio Tinto in Montreal. Before joining Rio Tinto, I had worked for 20 years, initially in the mining sector and then in the renewable energy sector.
Before getting into the topic at hand, although I'm pleased to be here today to answer any questions you may have, I would just like to briefly point out that the wording of the motion that has brought us here is not exactly correct. Rio Tinto never, to my knowledge, publicly announced that the total budget for ELYSIS was $240 million. Nor did we ever say that there had been cost overruns beyond the initial budget. More specifically, since 2018, Rio Tinto and its joint venture partners publicly announced an initial funding phase of $228 million, $160 million of which came in the form of equal contributions from the Quebec government and the Canadian government. I'll come back to this later.
Rio Tinto is a world leader that produces minerals and metals the whole world needs. Our products include iron ore, copper, aluminum and critical minerals.
Needless to say, we want to grow our business and create value for our shareholders and all the stakeholders, and we have publicly promised to be carbon neutral by 2050. Our clients, our investors and all of our employees are working towards achieving our carbon neutrality goal. A major share of the technology needed to achieve this goal is brand new, and that's also true of ELYSIS.
Rio Tinto, a global enterprise, is also the largest active mining and metallurgical company in Canada. Our Canadian operations rank second among our many activities around the world. We take pride in investing here for the long term, growing our business and working with provincial governments and the federal government. Our Canadian operations generate well-paying jobs for over 13,800 employees in Canada, approximately 8,000 of whom work in Quebec. Of these, approximately 4,400 are in Saguenay—Lac-Saint-Jean.
Canada is particularly well positioned for the production of low carbon primary aluminum. Access to self-produced hydroelectric energy is a key competitive advantage for us and the energy transition will require more and more aluminum.
Many of our top technological breakthroughs came right here in Canada. I'll mention just two of these, beginning with AP60 technology.
Last June, we announced the first major aluminum sector investment in the western hemisphere in nearly 10 years. It involved a $1.4 billion investment to further develop our AP60 technology in Saguenay, $1.2 billion of which came from Rio Tinto.
AP60 low carbon emission technology is currently among the most effective in the world for the production of aluminum on an industrial scale. When combined with hydroelectricity, it generates only one-seventh as much greenhouse gas per tonne of aluminum as the current industry standard.
We are currently finishing site preparation work. In 2026, the AP60 aluminum plant will be fully operational, increasing production capacity to approximately 160,000 metric tons of primary aluminum per year.
AP60 technology is essential for our development of ELYSIS. ELYSIS is why we are here today. It is cutting-edge technology, and it's no exaggeration to say that it could revolutionize the world of aluminum. Research and development on this scale requires major investment and teamwork by all stakeholders. Government funding initially represented 70% of ELYSIS funding, but the ratio has since flipped and the joint venture partners' contribution now accounts for 70% of the total.
In 2021, the partners stated that ELYSIS was aiming for installation of the technology to begin in 2024. We are now in 2024, and as I mentioned to a business audience in Montreal on Monday, I hope to be able to publicly announce our plans over the next few weeks.
We are making good progress on ELYSIS. However, as is usually the case for anything new, it takes time to do things properly. The development of such visionary technology also has risks. I'm sure we'll be returning to that topic. We're prepared to take these risks because we believe in the technology and its benefits. However, risk management for such a large-scale project requires step-by-step adoption of the right approach.
To conclude, it's in Rio Tinto's interest to develop ELYSIS with a view to large-scale production. It would benefit all of our workers in Canada.
I applaud Canada's foresight, because it has supported us from the very outset and invested in a revolutionary development that could well become one of the great inventions of the century. We intend to implement the technology here in Canada. Rio Tinto has invested $5.5 billion since 2018, only 7% of which comes from government funding. We wouldn't be investing at that level if we weren't serious, if aluminum wasn't central to Rio Tinto's strategy, and if we weren't convinced of its possibilities.
I'd be happy to answer your questions. I'd just like to remind you that my colleague Dr. Nigel Steward, Rio Tinto's chief scientist, is with us virtually today.
Thank you.
I'm looking forward to continuing this discussion with you.
:
Thank you, Mr. Martel. I'm glad you asked that.
It's important to know that 60% of our global aluminum production is in Canada. It's partly in Kitimat, British Columbia, but most of our Canadian production is in Saguenay. Saguenay is, and will continue to be, the focal point of Rio Tinto's worldwide aluminum production.
To answer your question specifically, I would say that ELYSIS is a joint venture that now employs 100 researchers, all of whom work in Quebec, with about three-quarters of them in Saguenay and one-quarter in Montreal. There is funding for research at our Quebec laboratories and also at those of our partners around the world. These activities represent equipment expenditures, for tests and all the other research being carried out in Saguenay. The vast majority of these expenses are in Saguenay, as are all of our investments in the region. The STAS company provides the equipment needed for ELYSIS prototypes, and we intend to continue with them.
I repeat that 100% of ELYSIS employees are in Saguenay, and the vast majority of ELYSIS expenditures on laboratory equipment, prototypes and tests are also in the region.
:
There will be short-term and long-term benefits.
In the short term, by which I mean the next few years, we will continue to create jobs. In fact, we hire researchers in Canada and Quebec on a quarterly basis to work at our research centres in both Saguenay—Lac-Saint-Jean and Montreal.
I should point out that ELYSIS technology decarbonizes aluminum electrolysis by using non-carbon anodes that do not release any CO2. This allows us to attract talented researchers and workers who were not particularly interested in yesterday's aluminum industry. We are going to continue with these efforts and invest in a pilot unit.
I believe that ELYSIS will help build the Saguenay of tomorrow. Saguenay's production site exists today because 100 years ago, my distant visionary predecessors built hydroelectric power stations. That's what gave Quebec a sustainable competitive advantage in aluminum production for decades. It's clear today that if we want to continue to do so, aluminum production will have to release diminishing amounts of carbon. Carbon emissions from production in Saguenay result from the electrolysis process. If we can manage to produce aluminum on a comparable scale using other patented processes, it will become possible to restore this sustainable competitive advantage and keep a step ahead of the competition in the entire industry. And as I was saying, in doing so, we'll be inventing the Saguenay of tomorrow.
ELYSIS is being developed in the Saguenay and will be used in Saguenay. That will make it possible to create another level of competitive advantages for the aluminum industry in Quebec. Our clients, or rather the clients of our clients, such as those who build automobiles or aircraft, or who produce packaging, want aluminum that has a very low carbon footprint. For 20 years, when we told them that we were producing aluminum using hydroelectricity, that kept them happy; but it's no longer enough for them. They now want an electrolysis process that doesn't release any carbon. And that's precisely what we are trying to accomplish together, through ELYSIS.
:
I think there are two different ways to interpret their announcement.
First, it shows that governments are supporting their aluminum industry. The Canadian government has been doing so for a long time, as has the Quebec government. The U.S. government has also begun to do so through its very powerful Inflation Reduction Act. The fact that this highly important job-rich industry is being maintained by the government is therefore no longer just a Canadian anomaly, because the U.S. government is doing it too.
The second thing that needs to be pointed out echoes what I was saying earlier. When Century Aluminum says that it is going to produce green aluminum, it's oversimplifying. What it really means is that instead of using electricity from coal power plants, as it is doing now, Century Aluminum will switch to using renewable energy, and will be receiving support to do so. In Saguenay, on the other hand, we've already been using renewable energy for 100 years, in the form of hydroelectricity.
As I was saying earlier, through ELYSIS, we are going to try to restore our competitive advantage to an even greater extent. To the best of my knowledge, Century Aluminum will not be using an electrolysis process like ELYSIS. It will use carbon electrodes. That means a production process like the one we are currently using in Saguenay. They're trying to catch up to us. That means that we need to continue to move forward, and that's precisely what ELYSIS will enable us to do.
:
Our plan—and, if I take a step back, Rio Tinto's plan as a group—is to lower its CO2 emissions by 50% by 2030 and to get close to zero by 2050, which is much more ambitious than the average in the mining industry.
The emissions of Rio Tinto aluminum are 70% of the total of the emissions of Rio Tinto. We want to reduce CO2 emissions, first, to meet our group's CO2 targets; second, to create a long-lasting competitive advantage; and third, I would say, to create a much more healthy aluminum business.
I've been in renewable energy before, as I told you, and it's clear now that when you look at the energy transition, in moving the world to renewable energy there are bottlenecks that need to be lifted, but that happens. What you need to attack is the how-to of each sector: steel, aluminum and transportation. Greening aluminum is part of that pool as well.
Mr. Pécresse, you are no doubt aware of the fact that in 2007, conditions were placed on Rio Tinto's acquisition of Alcan. Everyone also knew about these conditions. One such condition was that $3 billion was to be invested in Quebec and British Columbia, $2.1 billion of which was for an aluminum smelter here in Saguenay—Lac-Saint-Jean, which amounted to 240 cells for the production of 450,000 tonnes. Another requirement was maintaining the same level of activity at the Montreal headquarters, to maintain the same level of activity for regional development, and to maintain the research and development activities.
As far as I can see, 34 cells have been installed and there are plans to increase this number to 96. That's nowhere near 240 cells. It's also 10 years behind schedule. As for the strategic functions at headquarters, many might consider them to have been outsourced. And research and development has been considerably reduced. There used to be approximately 200 scientists working at Rio Tinto, and now there are barely 100.
I have one relatively straightforward question for you: Do you believe that Rio Tinto has met its 2007 commitments?
:
You are talking about a specific part of the equipment. I want to be clear, Mr. Simard. Regarding the AP60 technology, I looked into the issue again recently and I can tell you that for a very large majority, we are working with suppliers from Saguenay—Lac-Saint-Jean and Quebec. When we have finished installing the AP60 pots, the portion of the $1.4 billion allocated to spending in Quebec will be considerably higher than 50%.
When we make investments like these, we also have economic and budgetary constraints. As well, Saguenay—Lac-Saint-Jean is not capable of providing all of the equipment we need.
Regarding the situation you spoke about, which represents only a small part of the project, we have in fact had economic concerns in terms of sticking to budgets. We must not forget that we have a duty to create value for shareholders. For some particular equipment, that may mean that we look outside Saguenay—Lac-Saint-Jean.
I would reiterate that at the end of the project, the percentage of the equipment that will be supplied in Saguenay—Lac-Saint-Jean will be very considerably over 50%.
Since I arrived, six months ago, a lot of Quebec suppliers have come to see me, first, to get to know me, but also, second, to tell me they are pleased to be working with us in Saguenay—Lac-Saint-Jean. They tell me they want to work more with us and preserve the excellent relationship we have. I would say that this is one of the positive surprises I have had. You can ask STAS, EPIQ Machinery, Groupe Alfred Boivin, Charl-Pol, or all the other companies we work with. I believe we are completely integrated into the local economic fabric.
:
I don't know what you call a timetable, Mr. Simard.
I reiterate that with ELYSIS, for the first time in the world in the last 100 years, we are reinventing how aluminum is produced. This is not an easy process. If it were, someone would already have found a way to do it.
As for where the ELYSIS project will have got to in 2030 or 2031, I have no idea. If I gave you another answer, I would be lying. This is a technology that we are going to industrialize step by step. We will start building industrial-sized plants when we are satisfied that it can work at that scale. Other than telling you that I believe in this technology, the good news is that we have managed to produce aluminum at a sizable scale with no carbon emissions, thanks to the ELYSIS technology, so this is a project that has moved out of the laboratory.
Now, between leaving the laboratory and industrializing, we have to be able to replicate the process at the scale of the real pots. You have not said it, but, as you know, we have already announced that after producing aluminum with ELYSIS in 150 ampere pots, we were going to move on to 450 ampere pots. As for the timetable, what you asked me about, we said we would do it in 2024 in Saguenay—Lac-Saint-Jean, and we are working on it. We are also working on other stages of ELYSIS and, as I said, I hope to be able to announce them soon.
Thank you, Mr. Pécresse. Thank you for being with us.
First, I have to tell you that for our part, we find the questions the Bloc Québécois is asking and the position it is taking to be somewhat bizarre. With me is my colleague from Chicoutimi—Le Fjord, Richard Martel, who is a proud Saguenayan and is also very proud to have Rio Tinto in his region. The purpose of the questions asked today should be to understand the progress being made on the ELYSIS project, which is extraordinary. To someday succeed in producing carbon neutral aluminum would be a world first. We are very proud of this project. We know that it may be complicated in terms of research and development, as you explained earlier.
With that said, I am going to come back to the main subject of the motion. I would like to understand your business model and the federal government's contribution a little better.
For example, you said that certain figures in the Bloc Québécois motion were not accurate. So can you explain your business model and the federal government's contribution more precisely?
The Conservatives vote for a motion and then complain that the motion passed. Welcome to our world, Mr. Pécresse.
First, I want to thank you for being here, Mr. Pécresse.
In April 2007, we were promised Alma II. There were even collective agreements negotiated based on the investments in Alma II, but it never came to pass.
Recently, ground was even broken for the billet casting centre in Alma, but the project then fell through and it has gone back to the drawing board.
In Windsor, we had a plant called Nemak. It was a Mexican company. It received millions of dollars from Navdeep Bains and the Province of Ontario as well. Then they actually needed to cut the wages of the workforce in order to keep the investment to modernize auto manufacturing, with some new models. The Corvette was in there and a few other things for some of the components. They did this through research and development. Then the company, Nemak, decided to take that research and development and production and move it to Mexico. They threw the workers out. The workers actually had to go to court and, very recently, they got a settlement.
The reason I'm telling you about this is that I want to ask if there are any clauses in the grants and subsidies you've received from the federal and provincial governments that prohibit you from moving that technology and innovation to another country for manufacturing.
This took place at a time of a lot of angst in Windsor, especially when we subsidized the relocation of those jobs. I'm just wondering whether there are similar clauses, because I've been promised by the minister's office, most recently, that that type of agreement was a model to change things, but your agreement may not include that because it might have come before the time of the change. That's what I've been told.
:
You're right about the first factor, Mr. Généreux, because 90% of the electricity we now use to produce aluminum in Saguenay comes from our own hydroelectric power station.
Just imagine the situation 10 years from now, with all the uncertainties that scenario entails. When we consider our ambitions for aluminum production growth and its limits, including aluminum produced using ELYSIS technology, and when we consider how we want to decarbonize other elements in the value chain, including the alumina refinery in Vaudreuil, we have to admit that we'll need to electrify some things that aren't electrified today. We will very likely need more electricity in Saguenay―Lac-Saint-Jean than what our power stations can generate today.
Consequently, we will start by modernizing those stations. Speaking of which, our future investment program will include major funding to upgrade power stations in Saguenay―Lac-Saint-Jean. That's another indication of our commitment to the region.
We'll also have to consider how we can meet those needs, including perhaps by turning to new sources of renewable energy. This is a topic that we've begun to address in Quebec.
:
Colleagues, we will resume. This part of the meeting should run until 8:00 p.m.
Pursuant to the order of reference of Monday, April 24, 2023, the committee is resuming clause-by-clause consideration of Bill .
Once again, I would like to welcome Mark Schaan, senior assistant deputy minister, Strategy and Innovation Policy Sector; Samir Chhabra, director general, Marketplace Framework Policy Branch; and Runa Angus, senior director, Strategy and Innovation Policy Sector.
Thank you for being with us on this Wednesday evening.
[English]
If I'm not mistaken, Mr. Turnbull had a subamendment to NDP-2.
Mr. Turnbull, I'll yield the floor to you.
(On clause 2)
:
Now I'm going to talk about the amendment we're proposing.
I don't know if the linguists have considered the definition of the verb “de-identify” in English and the verb “dépersonnaliser” in French. If we were the only ones moving an amendment on this point, I think it might be because we're a bit too picky or demanding, but another party is calling for the same thing. Consequently, we have to try to come up with an equivalent definition of this idea in both languages.
Here's how the definitions in question are actually drafted.
[English]
de-identify means to modify personal information so that an individual cannot be directly identified from it, though a risk of the individual being identified remains.
[Translation]
In the French version, the meaning of the verb “dépersonnaliser” is as follows:
Modifier des renseignements personnels afin de réduire le risque, sans pour autant l'éliminer, qu'un individu puisse être identifié directement.
According to your interpretation, when reference is made, in the English version, to “someone who cannot be identified”, that's not the same thing as saying “réduire le risque”.
I don't know how you understand that or how the linguists understand it.
Which leads me to another question. You regularly testify before the committee, and you're involved in the clause-by-clause consideration of this bill. The people from the Department of Justice are often mentioned since you've collaborated with them. However, no linguist has been invited to testify before the committee and share his or her expertise regarding the drafting of these definitions.
The bill is many pages long. Can there be any risk that these words may be interpreted differently in English and French elsewhere in the bill? I think that's a reasonable question.
I'm asking a really innocent question: Is it normal for the people who work on the bill to come solely from the Department of Industry and for there to be no one from the Department of Justice?
This one's not a test, I don't think.
Throughout the bill, the term “lawful authority” appears. Now, we're in the early stages of the bill, and we found that our concern was that nowhere in the definition section of the bill does it actually define what “lawful authority” means. Without even providing that term, I think it provides a bit of ambiguity in there.
For instance, proposed section 44 of Bill allows an organization to share “an individual's personal information” with a government institution upon request “for the purpose of enforcing federal or provincial law”. The language of proposed section 44 is taken from PIPEDA, as I understand it, and it is problematic, given that it outlines few privacy safeguards that have been afforded to individuals in the past with Supreme Court decisions like the 2014 R. v. Spencer case. I'm sure everyone on the committee is familiar with that—I know that some of the witnesses are—but I'll just go over a summary of it.
R. v. Spencer, in 2014, according to Wikipedia, “is a landmark decision of the Supreme Court of Canada on informational privacy. The Court unanimously held that internet users were entitled to a reasonable expectation of privacy in subscriber information held by Internet service providers. And as such, police attempts to access such data could be subject to section 8 of the Charter of Rights and Freedoms. At issue was whether the police could request subscriber information associated with an IP address from an Internet service provider without prior judicial authorisation, who could then voluntarily provide it. The Supreme Court ruled that the request for internet subscriber information infringed on the Charter's guarantee against unreasonable search and seizure.”
Law enforcement, with some exceptions, in my view—in our view—generally should be required to produce a court order when asking for somebody's personal information: a bank account, personal messages, health information and that kind of thing.
The ambiguity with respect to the meaning of “lawful authority” that existed in PIPEDA with regard to disclosures to law enforcement remains in the CPPA and will likely result in continued disclosures of personal information without consent by organizations to police and to other law enforcement agencies in the absence of a court order.
Given this issue, the Privacy Commissioner recommended that the definition of “lawful authority” for purposes of sections like proposed section 44 in this bill be amended to clarify that individuals should still enjoy a reasonable expectation of privacy.
In the Privacy Commissioner's submission on Bill in May 2021, the Privacy Commissioner said:
Beyond transparency, clarity is also required with respect to the impact of the 2014 R v. Spencer decision with respect to when the state can obtain personal information via warrantless access. When Bill S-4 was before Parliament, the OPC recommended that:
a legal framework, based on the Spencer decision, is needed to provide clarity and guidance to help organizations comply with PIPEDA and ensure that state authorities respect the Supreme Court of Canada's decision. Such a framework would provide Canadians with greater transparency about private sector disclosures of their personal information to state agencies.
The Privacy Commissioner went on to state:
The ambiguity with respect to the meaning of “lawful authority” that existed in PIPEDA remains in the CPPA, as evidenced by companies' continued disclosures of personal information without consent to police and other law enforcement agencies absent a court order.
As such, we reiterate and update for Bill C-11—
At the time, that's what he was dealing with.
—a recommendation previously made in our 2015 submission to Parliament on Bill S-4, that a clarifying provision be introduced that defines lawful authority for the purposes of section 44. This provision would make clear that discretionary disclosures to law enforcement following a request should be permissible only where there are exigent circumstances, pursuant to a reasonable law other than section 44 of the CPPA, or in prescribed circumstances where personal information would not attract a reasonable expectation of privacy.
Recommendation 19: That a definition clarifying the meaning of “lawful authority” for the purposes of section 44 be introduced.
It wasn't. In his submission for this bill, on April 26, 2023, the Privacy Commissioner again proposed recommendation 19: “That a definition clarifying the meaning of 'lawful authority' for the purposes of section 44 be introduced” in this bill.
This amendment follows on the recommendations of the Privacy Commissioner on numerous occasions to “make clear that discretionary disclosures to law enforcement...should be permissible only where there are exigent circumstances, pursuant to a reasonable law other than section 44 of the CPPA, or in prescribed circumstances where personal information would not attract a reasonable expectation of privacy.”
That's by way of introduction. I haven't read the actual amendment, which is fairly short, but I know the witnesses have read it.
Do you agree with the Privacy Commissioner that this needs to be added to this bill, that we need to add a definition in the definitions section for “lawful authority”, which is a term used frequently throughout this legislation?
[English]
On this, I would say that what the Privacy Commissioner has called for is the Spencer test being put into the law.
When I look at the paragraph you quoted on that, I see three criteria: the criterion of “exigent circumstances”, the criterion of “a reasonable law” and the criterion of “prescribed circumstances”, which are the three criteria in the Spencer decision. What I want to make clear is that these are three separate criteria, so they are either-or. It can be exigent circumstances, or reasonable law, or prescribed circumstances. Actually, the Spencer decision doesn't refer to them as “prescribed circumstances” but rather as “the common law authority” that police have, which is in paragraph 71 of R. v. Spencer.
Those are the three criteria set out in R. v. Spencer. To the extent it should be defined, that is the definition currently used by law enforcement and organizations when they disclose pursuant to PIPEDA.
:
What I'm trying to get at here is that there's clearly a gap in the law, which you're trying to get at by using the term “lawful authority” throughout this version of the new privacy act that's being proposed in CPPA. We've seen how, with the weak wording that was in PIPEDA, which is carried forward here, businesses and organizations often provide information to law enforcement agencies or the agencies that are going after it on fishing expeditions when they don't really have the interest of the privacy of the individual in mind.
When a government organization or a law authority asks a business or an organization for access to something, they clearly, sometimes, without going through the hoops of consulting with all of their inside and outside corporate lawyers, give out access to personal information and data that hurts an individual's privacy.
There was recently a Supreme Court ruling on the issue of IP addresses. That was done in just the last few months, so clearly there's an issue with the current wording of PIPEDA, which this carries forward, which is inadequate to protect the privacy of an individual against the overreach of a law enforcement agency or government that is going after information, however legitimate they may think it is in the particular circumstance. Under law enforcement, you can pretty much justify most intrusions into personal privacy. Certainly, having the speed of this and not having to be burdened with going and getting a warrant or some sort of judicial authority to do this makes life a lot easier for those authorities, but that doesn't make it easier to protect an individual's privacy.
Without this type of further definition in the bill, we're going to continue to end up with these cases of people, with or without their knowledge, having their data shared with these agencies, and then having to fight, after the fact, through the Supreme Court, to try to put the toothpaste back in the tube, to say this was something that should not have happened.
Now, I'm not a lawyer, as I often say here, but this just strikes me as unfair when we have the opportunity right now, in creating a new privacy law, to actually listen to the Privacy Commissioner, who's been dealing with this for quite some time, for at least a decade, and asking for Parliament to put in a simple definition, which can be lifted straight from the presentation of the Privacy Commissioner.
Again, as MP Masse said last time, I trust the Privacy Commissioner on these issues and I have not yet been convinced that putting this in will somehow diminish the bill or harm somebody's privacy. In fact, I think it enhances an individual's privacy.
Does putting this in enhance somebody's privacy, or does it diminish it?
:
I don't want to take up too much time, but I do want to say that our questions are exactly the same.
First, it's important to have a definition that's authoritative and legitimate. We don't have one, and we need one.
Second, we've been wondering about the Emergencies Act and police investigations, in particular. I think our questions have been answered.
However, I have another question. You mentioned the legal test stated in the Spencer decision. I need to read the new definition more carefully, but offhand I think it's more appropriate. It adopts exactly the same test as is used in Spencer. So it's already in the case law.
So what's the difference between introducing that test into the law as is and not including a definition?
:
Mr. Chair, I have a very quick point.
It sounds like what I moved.... Actually, I didn't move it, because I wasn't able to. The subamendment that I was planning to move is now deemed another amendment, after we dispense with CPC-3. Essentially, there were brackets under (b), which was “it is pursuant to a reasonable law (other than section 44)”, and this could be changed to “other than section 33, 43 or 44 or subsection 47(1)”. Essentially, that would remove these self-referential loops within the bill and, for greater certainty, as some say, might make it a bit clearer and accommodate the suggestions that my Conservatives colleagues are making. It might be a way we could get this resolved.
Would that have any impact on the overall intention of what I had originally proposed when I planned to move it as a subamendment? No. Okay, great.
Why don't we do that? I'll agree to do that if we can dispense with CPC-3, and I will introduce exactly that.
:
As it is currently drafted, Bill provides no definition for the term “minor”, despite several mentions of the term throughout the text of the bill. In my opinion, this is problematic. In the absence of a definition, the definition of what constitutes a minor will have the meaning ascribed to it by provincial or territorial age-of-majority laws. For instance, it's 18 in Quebec and 19 in my province of British Columbia.
Different definitions across Canadian jurisdictions will, as some witnesses have said, “make compliance increasingly challenging and can put organizations in a position where they will need to build and implement different privacy practices by location raising both the technical costs incurred as well as the risk of failing to comply with a myriad of obligations by jurisdiction”.
This amendment seeks to resolve these issues by defining a minor as an individual under the age of 18. The age of 18 was selected to align with the United Nation's Convention on the Rights of the Child, the U.K. children's code and the California age-appropriate design code. Choosing this definition will also bring Canada into alignment with the introduction of the children's code and age-appropriate applications in CPC-17.
I've spoken with Elizabeth Denham, my new favourite British Columbian, who designed the U.K. children's code. Her main concern with our proposed children's code was not using the age of 18, especially considering Canada's obligation under the United Nation's Convention on the Rights of the Child, as I mentioned.
I would also say that, in testimony, we heard from David Fraser. He is from McInnes Cooper. He appeared at our meeting 91 on October 24. He stated:
One thing I'm a bit concerned about is that the current bill would be difficult to operationalize for businesses that operate across Canada. Whether or not somebody is a minor currently depends upon provincial law. That varies from province to province, and implementing consistent programs across the country would be difficult. I would advocate putting in the legislation that a minor is 18 years or below.
I will point out again that California's new online privacy and safety law for children outlines the age of 18, and it's modelled on the U.K. age-appropriate design code, which became enforceable on September 2, 2020. I would also note that, when we think about Canada's trade relationship with the United States, there are lots of precedents in American jurisdictions as well.
I reference these partly because of the testimony we heard from Scott Lamb. I can't recall the exact meeting, but I did have a follow-up conversation with Mr. Lamb where he talked about interpreting the existing privacy law in Canada and working on behalf of clients who have business in both Canada and the United States. He said that, from the perspective of applicable companies, they would often defer to the definitions included or the practices from American states and jurisdictions, and apply those same standards in Canada. This, of course, goes along with the design code they have in California. He was probably doing business with companies in California.
On July 1, 2024, Florida's law will go into effect. It applies not only to social media companies but also to online platforms that are defined to include online games and online gaming platforms. It defines a minor as someone under 18—not just children under the age of 13—in all online platforms that are predominantly accessed by minors.
Arkansas has passed the Social Media Safety Act, which, again, uses the age of 18 and has certain consent provisions related to the age of 18. Utah passed a law recently that prohibits kids under 18 from using social media between certain hours. That's a little excessive, but again, it's using the age of 18 with age-verification provisions. In Louisiana, it's 18 as well. Texas bans kids under 18 from joining a wide variety of social media sites without parental consent. I'm just outlining some of the great examples from America.
In our industry committee meeting number 98, Michael Beauvais said that the term “minor” must be defined. He said:
First, several key definitions [in this bill] need to be clarified. These include a definition of a minor and a definition of capacity to determine when a minor is “capable” of exercising rights and recourse under the act.
Michelle Gordon also said, in meeting number 98, that “minor” needs to be defined:
First, the law should define the terms “minor” and “sensitive”. Without these definitions, businesses, which already have the upper hand in this law, are left to decide what is sensitive and appropriate for minors. The CPPA should follow the lead of other leading privacy laws.
She then—and this is my reason for what I stated earlier—referenced the California Consumer Privacy Act, the U.S. COPPA, the EU's GDPR and, indeed, Quebec's law 25.
David Fraser, in meeting number 91, said that “minor” does need to be defined. He stated:
One thing I'm a bit concerned about is that the current bill would be difficult to operationalize for businesses that operate across Canada. Whether or not somebody is a minor currently depends upon provincial law. That varies from province to province, and implementing consistent programs across the country would be difficult.
In meeting number 92, Michael Geist, who, as I think we all know, is Canada research chair in Internet and e-commerce law, stated:
I'll note that one of the real concerns arises in differing definitions of minors from province to province and the like. Therefore, one thing I think we need to include within the legislation—I know other witnesses have highlighted it—is the need for some sort of consistent definition here so that we know there is that consistency of protection.
The Interactive Advertising Bureau of Canada submitted a brief on November 13, which stated:
Under the CPPA “minors” are not explicitly defined leaving the interpretation to be defined by the provincial/territorial age of majority laws. This lack of federal clarity makes compliance increasingly challenging and can put organizations in a position where they will need to build and implement different privacy practices by location raising both the technical costs incurred as well as the risk of failing to comply with a myriad of obligations by jurisdiction.
Our recommendation would be to amend the Bill to include a single age threshold nation-wide. The Bill should specifically define the term “minor” and perhaps align with Quebec's Law 25—
I will note, for my Quebec colleagues, that he did say that as a suggestion.
—as it is already in effect, and which establishes a minor as someone under the age of 14 years old. This will be a less complicated approach will keep minors safe and set companies up for success—not failure.
I'm going to go back to this point in just a minute, because I think it's really important.
The Canadian Chamber of Commerce also stated:
As the term “minor” is not defined in the CPPA, the term will have the meaning ascribed to it by provincial/territorial “age of majority” laws, which provide that, in the absence of a definition or an indication of a contrary intention, a “minor” is a natural person under the age of 18 in AB, MB, ON, PEI, QC, and SK and a natural person under the age of 19 in BC, NB, NL, NT, NS, NU, YT. Differing definitions of “minor” across Canadian jurisdictions will require businesses operating in multiple jurisdictions to develop and implement different: (1) consent management policies, practices, and procedures; (2) user/customer experiences; (3) retention and breach reporting policies; and (4) security safeguards for different sets of jurisdictions. It may also require such businesses to engage in age profiling in jurisdictions where a “minor” includes a person who is 18 years old. This will impose an undue burden on such businesses and may lead to customer confusion. It is recommended to harmonize the definition with Quebec Law 25
I am reading this testimony for you specifically, Mr. Garon, because I did have internal debate about whether it should be 14 or 18. The reason I mentioned amendment CPC-17 is that, while I do note that a minor is defined as someone under the age of 14, as I've read two times already into the record tonight, the challenge I have approaching this as a parent and as an uncle is that I don't believe the decision-making capacities of children at 15, 16 and 17 are necessarily always developed to the extent that they need to be for them to make rational decisions about their well-being.
It kind of reminds me of a policy in the school district where my kids go. As a parent, I see that children in the school district have access to every social media platform imaginable. They can go and buy things on Amazon accounts without their parents knowing. They can look at whatever they want to on the Internet, but if you want to go skating with your class, my gosh, you need your parents' permission.
I'll end there. I look forward to a discussion on this. The testimony is very clear that we do need to have a discussion on defining what a minor is, largely for businesses' purposes. I would contend as well that it's for future amendments that will be put into this law, and my hope is that it will safeguard children from online harms.
Thank you, Mr. Chair.
:
I won't give the rest of this speech, because I do want to get to hockey.
I think there are compelling reasons, obviously, for setting an age.
When I was first briefed by the department on the legislation, this was one of my first questions, because, at second reading, a big part of the minister's speech was about the focus of this bill to protect children and improve privacy for children, which I believe is and was his genuine intent, but it concerned me that there wasn't a definition. The response, I think, of the department at the time was that if we left it as it is, it would be up to various definitions in provincial law. As a marketer—and I can never leave my hat as a marketer—that would worry me because that means I would have to have 10 plus different systems about when the data I have on an individual moves from being totally sensitive, which is what happens currently under this proposal, to having elements of it that can be used for purposes when they leap over that age, whether it's 13, 14, 16 or 18.
Mr. Vis suggested the age of 18. Personally I think that it should probably be 18, but I'm open to a discussion on that. If we pick an age that is going to be across the country, what's the department's view? Age 18, to me, is when you can vote, when you can start to do some things and when you graduate from high school. You can do some other things, but you can't drink and you can't smoke marijuana. You can drive at 16, yes, but you can't drive fully on your own at 16 anymore, like I used to. In Quebec, you can. That's because in Quebec they just have driving guidelines, not laws.
The issue, I think, is whether 18 is the right age. I believe it is. How does the government feel about that? One, should it be defined? Do you agree now that we should define it? Two, is age 18 appropriate?
:
Thank you for that question.
[English]
As a Manitoban who had the unlucky fate of turning 18 and then immediately moving to the province of Ontario for university, where there was a different understanding of what competency was as it related to the consumption of libations, I feel this point quite deeply.
On a serious note, for the purposes of the act, as we are heightening the treatment of information as it relates to minors to that of “sensitive”—meaning that it requires a duty of care and a much higher standard for its protection and consideration—it is useful to have a clear obligation as it relates to that. There were initial concerns and conceptions about whether or not federal and provincial competence was potentially at issue here. The view is that this is in a zone in which this can be established in a federal statute regarding its application. I think the definition of “minor” will be very helpful in the interpretation and implementation of the law.
There will be considerations as we go through the statute of whether or not, with that capacity threshold, there are some individuals who might fall within the definition of under 18 but are still allowed to exercise their own rights under the law. As we defined earlier in some of the previous amendments under the definitions, that becomes important, because there are some, not all, 16- and 17-year-olds who have the capacities, but 18 is a threshold that's common across a whole host of societal norms.
That would be our response.
We're obviously given all kinds of examples of the ability to make decisions. We're told about the laws of Utah and Texas, a state that incidentally has abolished abortion, thus denying women's rights. People cite legislation on the age of consent in certain American states where young people can go and get shot at in Afghanistan at the age of 18 but can't buy a beer when they go home.
In many respects, this is a value judgment issue. I'm not saying that as a joke. We're trying to determine who should be considered a minor in the context of the disclosure of personal information. Incidentally, for your information, I would remind the NDP and my friend Mr. Masse that they've introduced a bill in the House that would allow people to vote starting at the age of 16.
Here's the question we need to ask ourselves: Until what age should parents have full authority regarding the disclosure of personal information on the Internet, social media and elsewhere?
We also have to take into account the fact that there are clauses further on in the bill providing that the minimum age may be redefined, and I know you want to propose amendments regarding that. I know you discussed the age of majority that should be set in the bill, which you think should be 18, and that this will be reflected in subsequent amendments.
The compromise made in Quebec was to set the minimum age at 14. That's obviously under the Quebec law, and, as you know, we support the National Assembly's consensus. However, we nevertheless believe that was reasonable because we're not talking here about buying alcohol and driving a motor vehicle. We're talking about disclosing information on social media and the use of commercial products. Both present a risk, but they're virtually essential to socialization today.
Without wanting to criticize what's being presented here, I think it's entirely reasonable to set the age at 14. I'm more convinced that 18 is too high. That's where I stand so far.
I was going to move a similar subamendment to the definition of “minor”. I didn't quite have the treatise to read into the record that Mr. Vis had—
Voices: Oh, oh!
Mr. Ryan Turnbull: —but I wanted to express some rationale as to why setting the age of a minor and defining it in the context of the bill would be a good move. I will just say that from our side, we fully support the amendment he offered.
With regard to Mr. Garon's points, we intend to work on a capability test and on including that in the bill. I think it would modify it slightly and give some ability for minors who are under 18 to exercise their rights over their personal information, if they have the capability of doing so.
Mr. Garon, you and I actually had a conversation about this prior to getting into clause-by-clause. It was brief, I know, but I think it might help you feel more comfortable if “minor” is defined as 18. That's not to say that it's perfectly aligned with your perspective, but we're all having a little bit of water with our wine in this process, I'm sure. I will just say that I respect your point of view, but we will be supporting the definition of under 18 for minors.
Thank you.
:
I would point to two things that I think are important. One is that under this definition of “minor”, minors' information under the act, as we've now identified through the amendments, will be defined as “sensitive” information, which means that it requires a duty of care and a greater level of protection.
However, I would draw members' attention to page 6 of the bill, under “Authorized representatives”. The relevant part here is proposed paragraph 4(a):
4. The rights and recourses provided under this Act may be exercised
(a) on behalf of a minor by a parent, guardian or tutor, unless the minor wishes to personally exercise those rights and recourses and is capable of doing so;
The capability test is one that's been established in other courts of law in terms of an assessment as to whether or not that individual would be able to exercise those rights on their own behalf. It's not ruling out the possibility that individuals under the age of 18 would have some oversight of their own personal information, but it is suggesting that for those under 18 information should be deemed sensitive, for which there is an allowance for a parent, guardian or a capable minor.
I think an example, when it comes to ages, particularly in the zone of 14 to 18, would be a ninth grader, potentially, who might have posted embarrassing information online that they regret. They would not have the right to have the information deleted if we actually set the test at 14, because of the nature of it. Older teenagers who may have less capability to understand their privacy information, and the implications from a privacy perspective of their actions, would not have the same protections as younger teens because it's not deemed sensitive and it hasn't necessarily afforded them the same rights under the law.
I think that's really what we're getting at here in changing it from 14 to 18. It's not ruling out autonomous action by those under 18; it's suggesting that the information of those under 18 is sensitive and that it requires a duty of care.