Author Archives: Dana Hägg

About Dana Hägg

BSc (Pure Mathematics, UCalgary), JD (UCalgary). Dana is a research assistant in national security, terrorism and international law to Professor Michael Nesbitt (UCalgary). She competed in the 2017 Bennett Jones Health Law Moot, the 2018 Philip C. Jessup Moot Court Competition, and the 2018 Georgetown Law National Security Crisis Simulation. Dana will be articling in 2018-2019 at HMC Lawyers (Calgary), and she will clerk at the Alberta Court of Queen’s Bench (Edmonton) in 2019-2020. Follow her on Twitter at @DanaHagg.

Private Networks, Public Importance: Reviewing the Communications Security Establishment’s Private Network Cybersecurity Regime Under Bill C-59

By: Dana Hägg, Jocelyn Gerke and Marika Cherkawsky

PDF Version: Private Networks, Public Importance: Reviewing the Communications Security Establishment’s Private Network Cybersecurity Regime Under Bill C-59

Provision Commented On: Section 22(1) of the proposed Communications Security Establishment Act under Bill C-59, An Act Respecting National Security Matters, 2017

The proposed Communications Security Establishment Act (CSE Act), which would be enacted by Bill C-59, expands the Communications Security Establishment (CSE)’s mandate such that the CSE would be able to conduct cybersecurity and information assurance activities on private networks. Given the amount of critical infrastructure in the hands of the private sector, this is a much-needed enlargement of the CSE’s powers.

This new power has been described as being entirely dependent on a request for assistance by the owner of the private information infrastructure (see Parliament, House of Commons, Standing Committee on Public Safety and National Security, Evidence, 42nd Parl, 1st Sess, Meeting 88 at 9:45 (Ms Greta Bossenmaier, Chief of the Communications Security Establishment)). However, this is not represented in the legislation. Under the proposed CSE Act, the CSE would be able to conduct a large amount of privacy-infringing cybersecurity and information assurance activity on private networks without the owner’s knowledge or consent.   Continue reading →