Privacy commissioner puts spotlight on internet monitoring technology

Is it a violation of privacy that should be banned or a tool necessary to keep the internet running?

Canada's privacy commissioner has opened an online discussion on deep packet inspection, a technology that allows internet service providers and other organizations to intercept and examine packets of information as they are being sent over the internet.

"We realized about a year ago that technologies involving network management were increasingly affecting how personal information of Canadians was being handled," said Colin McKay, director of research, education and outreach for the commissioner's office.

The office decided to research those technologies, especially after receiving several complaints, and realizedit was an opportunity to inform Canadians aboutthe privacy implications.

Over theweekend,the privacy commissionerlaunched a website where the public can discuss a series of essays on the technologywritten by14 experts. The expertsrange from the privacy officer of a deep-packet inspection service vendor to technology law and internet security researchers.

The website also offers an overview of the technology, which it describes as having the potential to provide "widespread access to vast amounts of personal information sent over the internet" for uses such as:

• Targeted advertising based on users' behaviour.
• Scanning for unlawful content such as copyright or obscene materials.
• Interceptingdataas part of surveillance for national security and crime investigations.
• Monitoring traffic to measure network performance.

The latter can be used by ISPs to give priority to some applications over others a practice that has upset those who strongly believe in "net neutrality," in which all internet uses and applications are treated equally. Internet traffic managementis the subject of ongoing consultations by the Canadian Radio-television and Telecommunications Commission.

Broad range of views

McKay said some of the privacy commissioner's research on deep packet inspection was incorporated into its submissionto the CRTC, but a far broader range of views and opinions is provided on the site by those who submitted essays.

The authorsinclude:

• Brooks Dobbs, the privacy officer for Phorm, a British firm that uses the technology to offer more tailored advertising.
• Richard Clayton, treasurer of the Foundation for Information Policy research, who alleges that internet service providers will commit criminal offences by using Phorm.
• Stphane Leman-Langlois, a criminology professor at the University of Montreal who believes that all the potential uses of deep packet inspection will be put to use sooner or later and net neutrality is "almost certainly a thing of the past."
• Harry Abelson, a professor of computer science and engineering at the Massachusetts Institute of Technology, who believes deep packet inspection should be banned, as it violates privacy and affects the reliability of information delivery.
• Anil Somayaji, a Carleton University computer science professor who believes deep packet inspection is an essential tool needed to protect the internet and keep it running.
• Danielle Citron, a law professor at the University of Maryland, who cites a number of ways to boost the transparency and oversight of deep packet inspection practices, such as instituting a "do not track" list.

McKay said he would have liked to have had more experts with a network technology perspective, butsome potential contributorswere too busy tosubmit anessay. However, since the site went live,McKay was contacted by a supplier of deep packet inspection technologythat asked if it could add a piece, he said.

The discussion on the website isn't a public consultation. Nor is it expected to result in policy, as the privacy commissioner's office doesn't have jurisdiction over internet management, McKay said.

"It's really an attempt to take some of our research and make it more public and see whether that research can develop any more insights into the issue," he said.

He added that Canadians should be examining how technology affects their daily decisions and the choices made available to them.

"Technology can often be beneficial, but sometimes you do have to be, if not critical, at least questioning to make sure the technology really is positively affecting your life."