On November 3, 2021, the Canadian Centre for Cyber Security released an important document for governments as well as small/medium and large enterprises—it is entitled, “Security considerations when developing and managing your website (ITSAP.60.005)”. It discusses security and privacy protection measures that organizations can start using in order to tackle the issue of cyber threats that can compromise websites.
The Office of the Privacy Commissioner’s findings do not mean that consent to the collection of an IP address is always required. There may be a number of legitimate reasons for collecting this information, including those relating to security of the site. These reasons would not necessarily extend, however, to collection and use of IP addresses for advertising purposes without some form of consent.