In what promises to be one of the most consequential digital rights battles in Canadian legal history, the Office of the Privacy Commissioner of Canada (OPC) has escalated its long-simmering dispute with Big Tech into the courtroom. According to an official Notice of Application filed in the Federal Court, Privacy Commissioner Philippe Dufresne is seeking judicial enforcement of compliance recommendations against Google LLC, aiming to establish an enforceable, statutory mechanism for individuals to de-list damaging and outdated personal search results under the Personal Information Protection and Electronic Documents Act (PIPEDA).
The filing marks the definitive transition from jurisdictional skirmishing to substantive enforcement. For nearly a decade, search engines operating in Canada have pushed back against the concept of a domestic "right to be forgotten" or de-indexing remedy, contending that PIPEDA was never designed to govern search indexing and that compelled de-listing violates constitutional guarantees of free expression. With the OPC now asking the Federal Court to issue binding remedial orders, Canadian privacy litigators, regulatory practitioners, and corporate counsel face a critical juncture in the evolution of digital privacy jurisprudence.
The Procedural Odyssey: From Jurisdictional Reference to Court Enforcement
To understand the gravity of the OPC's latest application, counsel must look at the protracted procedural history that brought the parties to the Federal Court's doorstep. The underlying complaint originated from an individual who alleged that search results generated by entering their name linked to outdated, sensitive, and highly prejudicial information, causing severe professional and reputational injury.
When the OPC commenced its investigation, Google initially challenged the Commissioner’s jurisdiction, arguing that its search engine service does not collect, use, or disclose personal information in the course of "commercial activity" under subsection 4(1)(a) of PIPEDA, and that indexing falls squarely within the statute's "journalistic, artistic or literary" exemption under paragraph 4(2)(c).
"The threshold question of whether search engines are subject to federal private-sector privacy oversight has been settled. The inquiry now turns to the substantive remedy: can PIPEDA force a global search intermediary to sever the link between an individual's name and lawful online content?"
The OPC referred those threshold questions to the Federal Court via a reference under subsection 18.3(1) of the Federal Courts Act. In Reference re Subsection 18.3(1) of the Federal Courts Act (2021 FC 723), and subsequently affirmed by the Federal Court of Appeal in Google LLC v. Canada (Privacy Commissioner) (2023 FCA 200), the courts definitively held that:
- Commercial Activity Applies: Google collects, uses, and discloses personal information in the course of commercial activities when operating its search engine.
- No Blanket Journalistic Exemption: Search engines are not themselves engaging in journalism merely by indexing, categorizing, and displaying links to third-party journalistic publications.
With those jurisdictional hurdles cleared, the OPC concluded its investigation, found the complainant's grievance well-founded, and recommended de-listing. Because the Commissioner currently lacks unilateral order-making powers under PIPEDA, the OPC exercised its statutory prerogative under section 15 to bring an application before the Federal Court for binding judicial relief.
The Substantive Clash: Interpreting PIPEDA’s Core Principles
The substantive hearing before the Federal Court will hinge on how existing PIPEDA principles map onto the technical mechanics of internet search architecture. The Commissioner’s position rests on three primary statutory pillars within Schedule 1 of the Act:
- Appropriate Purpose (Section 5(3)): PIPEDA mandates that organizations may only collect, use, or disclose personal information for purposes that a reasonable person would consider appropriate in the circumstances. The OPC contends that continuing to index acutely sensitive or obsolete personal data, where the harm heavily outweighs any legitimate public interest, breaches this overarching standard.
- Accuracy and Currency (Principle 4.6): Personal information must be as accurate, complete, and up-to-date as is necessary for the purposes for which it is to be used. Displaying prominent search results that paint a distorted or anachronistic portrait of an individual directly engages this principle.
- Withdrawal of Consent (Principle 4.3.8): Individuals generally possess the right to withdraw consent to the ongoing disclosure of their personal data, subject to legal or contractual restrictions.
The Intermediary Defense: Neutrality and Expression
In response, Google and internet governance interveners are expected to mount a robust defense centered on intermediary liability and the Canadian Charter of Rights and Freedoms. Search engines maintain that indexing is an act of facilitating public access to lawful, publicly available expression published by third parties.
Compelling an intermediary to de-list content creates a serious constitutional friction under section 2(b) of the Charter (freedom of expression and freedom of the press). Counsel will recall the Supreme Court of Canada’s landmark ruling in Crookes v. Newton (2011 SCC 47), which affirmed that hyperlinks are fundamental to the operation of the internet and do not, in themselves, constitute publication of defamatory content. The Federal Court will be tasked with reconciling that common law reality with statutory data protection obligations.
Comparative Regimes: Where Canada Stands Globally
While the European Union codified the right to erasure under Article 17 of the General Data Protection Regulation (GDPR) following the seminal Google Spain decision (C-131/12), Canada's legislative landscape remains fragmented. The table below outlines how the right to de-listing is currently treated across key Canadian and international privacy frameworks:
| Jurisdiction / Statutory Regime | Statutory Basis for De-Listing | Enforcement Mechanism | Geographic Scope of Orders |
|---|---|---|---|
| Federal Canada (PIPEDA) | Implied via ss. 5(3), Principle 4.6 (Accuracy), and Principle 4.3.8 | OPC recommendation followed by s. 15 Federal Court Application | Primarily domestic (.ca/Canada-geo-targeted), subject to Equustek principles |
| Quebec (Law 25 / Private Sector Act) | Explicit statutory right to cease dissemination, de-index, or re-index (Section 28.1) | Direct order-making power via Commission d’accès à l’information (CAI) | Provincial jurisdiction, extraterritorial enforcement currently litigated |
| European Union (GDPR) | Explicit Right to Erasure / De-referencing (Article 17) | Direct administrative fines and orders from Data Protection Authorities (DPAs) | EU-wide domains; limited extraterritorial reach post-Google v. CNIL |
| Proposed Federal (Bill C-27 / CPPA) | Explicit Right to Disposal (Section 55), but narrow intermediary carve-outs | Order-making power by Privacy Commissioner, Tribunal enforcement | Federal jurisdiction across commercial operations |
Strategic Implications for Canadian Legal Practitioners
The OPC’s decision to litigate this application rather than await the delayed passage of federal privacy reform (Bill C-27) sends a decisive signal to the market. Legal counsel advising digital platforms, corporate reputation clients, or litigating complex privacy torts should prepare for several immediate practical ramifications:
1. Advising Reputation and Defamation Clients
Historically, plaintiffs faced with severe online reputational damage had to pursue protracted and expensive defamation or invasion of privacy lawsuits against primary publishers or anonymous actors. If the Federal Court confirms that PIPEDA provides an actionable, court-enforceable de-listing remedy against search intermediaries, regulatory complaints under PIPEDA will become an indispensable, cost-effective tool in the litigator’s toolkit.
2. Compliance Protocols for Digital Intermediaries
Counsel representing search engines, aggregators, AI platforms, and algorithmic content curators must re-evaluate their notice-and-takedown procedures within Canada. Relying solely on voluntary "Right to be Forgotten" web forms designed for the EU will no longer suffice if Canadian courts articulate distinct domestic balancing tests that weight section 5(3) appropriateness and Canadian public interest thresholds differently from GDPR Article 17.
3. The Inevitable Territorial Scope Battle
Should the Federal Court grant the OPC's requested orders, the dispute will swiftly pivot to the geographic reach of the remedy. In Google LLC v. Equustek Solutions Inc. (2017 SCC 34), the Supreme Court of Canada affirmed that Canadian superior courts possess the equitable power to grant worldwide injunctions against intermediaries. However, in the context of personal data protection and competing international speech norms, courts may hesitate to order global de-indexing, likely focusing on geographic filtering (geo-blocking Canadian IP addresses) to prevent international jurisdictional overreach.
Looking Ahead: Setting the Ground Rules for the Algorithmic Age
The Federal Court’s eventual ruling in this application will establish definitive ground rules for the balance between individual dignity and public access to digital records in Canada. As artificial intelligence engines and large language models increasingly absorb, synthesize, and surface personal data across the web, the principles forged in this search engine showdown will directly dictate the limits of algorithmic accountability.
For the Privacy Commissioner, this case represents a critical assertion of institutional relevance—demonstrating that even under an aging statutory framework like PIPEDA, federal regulators have the resolve to hold global tech entities accountable through the courts. For the Canadian legal community, the outcome will redefine the contours of digital privacy for decades to come.
