The Montreal-based operator behind Pornhub and other pornographic websites broke the law by enabling intimate images to be shared without direct knowledge or consent, the federal privacy watchdog has found.
The privacy commissioner’s investigation into Aylo, formerly known as MindGeek, followed a complaint from a woman whose ex-boyfriend had uploaded an intimate video and other images of her to Aylo websites without her permission.
Commissioner Philippe Dufresne says inadequate privacy protection measures on Pornhub and other Aylo sites have led to devastating consequences for the complainant and other victims.
“Privacy is a fundamental right,” Mr. Dufresne said on Feb. 29 in a statement.
“Given the enormous risks involved, Aylo must take steps to ensure that it only posts intimate images and videos with the direct knowledge and consent of everyone appearing in the content.”
The investigation also found that people faced an onerous and ineffective process when they asked Aylo to remove content that had been posted without their consent.
Mr. Dufresne made several recommendations aimed at bringing Aylo into compliance with the federal private-sector privacy law, the Personal Information Protection and Electronic Documents Act. Among them:
— immediately stop collection, use and disclosure of user-generated intimate images, videos and associated personal information until appropriate measures are in place;
— delete all content for which valid consent was not obtained directly from each individual depicted in the images;
— adopt measures to ensure that express, meaningful, and valid consent is obtained directly from each individual whose personal information is included in uploaded content;
— and simplify takedown processes.
The company “expressly disagreed with our conclusions” and has not committed to implementing any of the recommendations, the commissioner said.
Mr. Dufresne’s investigation report says the company did not seek the complainant’s consent to collect, use, and disclose her intimate images.
Instead, it relied exclusively on the uploader, her former boyfriend, to attest that she had agreed to the video being distributed.
The woman contacted the company to ask that the content be taken down, and it was subsequently removed, the report says.
However, the content, which could be easily downloaded by users at the click of a button, continued to be re-uploaded on various sites.
Strangers from around the world who had seen the video online contacted her on Facebook using information contained in the video’s title and tags, such as her name, mother’s maiden name, university and sorority, the investigation found.
Ultimately, the woman employed a professional takedown service, which led to the removal of more than 700 instances of her intimate images on more than 80 websites, the report says.
But the material continued to resurface and is likely still available online.
The woman said the loss of control caused her to withdraw from her social life, lose a job opportunity, and live in a constant state of fear and anxiety, Mr. Dufresne found.
The commissioner said while Aylo made changes to its consent practices in recent years, the company has not provided the watchdog with evidence it is obtaining meaningful consent from individuals.
