Searching for data privacy self-management: Individual data control and Canada's digital strategy

Abstract

The problematic presumption that users can control the vast consent and data-management responsibilities associated with big data is referred to as the fallacy of data privacy self-management. Though untenable, this presumption remains fundamental to Canadian privacy law, exemplified in the individual access principle of the Personal Information Protection and Electronic Documents Act governing commercial data management. This article describes the fallacy, critiques the individual access principle, and introduces potential solutions relevant to Canada's digital strategy.