I just got a festive present from my ISP, Rogers.
Following my recent talks regarding ISP packet injection/interception and data collection I wrote to the privacy officer at Rogers and asked, under PIPEDA, that I be supplied all information regarding my account, including any information that they have gathered such as URLs of sites visited, etc.
I got a fairly standard response which said that they did not collect any such data, to which I replied:
Hi,
I recently sent a letter to you asking for details of data that Rogers hold on me as required by PIPEDA. As expected you, or someone in your department, kindly replied. Thank you!
Most of it made sense however I did note that there was one area in particular that is inaccurate/untrue, specifically your statement “We do not collect the IP addresses or the domain names of the sites that you have visited or the time, dates and port numbers”. I understand it is entirely possible that this was not deliberate and it’s more likely that you are unaware of some of the data that Rogers holds, nonetheless I thought that I should mention this so that this mistake is not replicated in the future placing you in breach of PIPEDA.
To provide you some insight, when you insert consumer messaging into webpages, such as the “you have exceeded 75% of your bandwidth allowance…” message, you use a system called the Bulletin System manufactured by Perftech to do so. Putting aside the legality of this tool (I believe this breaks the Telecommunications Act) for a moment, you should note that this tool tracks user web browsing behavior (other than encrypted sessions) and keeps a history of the past 30 days tied to user account, irrespective of if that user is receiving any messaging at the time or not.
If it helps you to track down this system, one of it’s nodes (REDACTED) is currently live on the IP REDACTED within your network.
If you would like further information on this I have a sizeable amount of documentation and evidence to support this.
Please feel free to come back to me if you have any questions or queries.
Thanks
Lee
Their response?
I don’t feel that this is going to progress anytime soon.