Canadian proctoring biometrics found to fail legal thresholds for consent and discrimination
An academic report from the University of Ottawa, supported by the Office of the Privacy Commissioner of Canada, found that widely used online exam proctoring tools collect biometric and personal data under conditions that do not meet Canadian legal standards for meaningful consent and raise privacy and discrimination concerns. Press coverage and the OPC project page documented the report’s findings in November-December 2022, noting risks from AI-driven facial detection and monitoring as well as cross-border data control issues.
Proctoring systems collected biometric data under conditions the report said were not conducive to free, clear and individual consent.
Key facts
- What
- An academic report from the University of Ottawa, supported by the Office of the Privacy Commissioner of Canada, found that widely used online exam proctoring tools collect biometric and personal data under conditions that do not meet Canadian legal standards for meaningful consent and raise privacy and discrimination concerns.
- Incident date
- Nov 17, 2022
- Who
- Canadian universities
- Failure mode
- Policy Violation
- AI surface
- Computer Vision
- Severity
- High
What happened
A University of Ottawa report (led by Prof. Céline Castets-Renard), funded through the Office of the Privacy Commissioner of Canada’s Contributions Program, concluded that AI-enabled online proctoring tools used by Canadian universities did not provide the conditions for free, clear and individual consent for students. The report identified use of biometric techniques (facial detection, keystroke analysis, eye tracking, audio monitoring) and data mining by vendors such as Respondus, Proctorio, ProctorU and others and warned of privacy, discrimination, and cross-border data transfer risks. The Office of the Privacy Commissioner of Canada posted the project and supporting materials and media outlets reported the findings in late 2022.
What broke inside the model
- 01 · TriggerA prompt pushes against a deployment boundary.
- 02 · Model stepThe model produces the disallowed output.
- 03 · Control gapNo enforcement blocks it at generation time.
- 04 · FailureThe output crosses the policy line.
- 05 · ConsequenceA limit the business set is breached in public.
The output crosses a policy boundary the deployment had defined.
The failure arose from how proctoring systems collected and processed biometric and behavioral data, AI-based facial detection, keystroke and eye-tracking, and continuous audio/video monitoring, without conditions conducive to meaningful consent and with secondary uses (model improvement) that complicated control. The systems were also prone to false flags caused by benign factors (pets, children, poor equipment, household context) and the report highlighted risks of socioeconomic and intersectional discrimination and difficulties enforcing privacy controls when vendors are US-based.
What it cost
Sources
- PrimaryOnline exam proctoring software during the pandemic: The quest to minimize student privacy risks - Office of the Privacy Commissioner of Canadapriv.gc.ca
- PrimaryLogiciels de surveillance d’examens en ligne en temps de pandémie : à la recherche d’une minimisation des risques d’atteinte à la vie privée des étudiants (University of Ottawa report)chaireia.openum.ca
- PressOnline proctoring biometrics use fails to meet Canadian legal threshold, report says | Biometric Updatebiometricupdate.com
- PressOnline proctoring biometrics fails to meet Canada's legal threshold of consent: report | Canadian Lawyercanadianlawyermag.com
Cite this entry
https://failureindex.ai/failures/canadian-proctoring-biometrics-found-fail-legalAI Failure Index. "Canadian proctoring biometrics found to fail legal thresholds for consent and discrimination" (FI-0349). Realm Labs. https://failureindex.ai/failures/canadian-proctoring-biometrics-found-fail-legal (indexed Jun 9, 2026).Data fields CC-BY 4.0, prose citation permitted. Incident ID FI-0349. Full dataset at /data.
Note from Realm Labs, the Index steward
How Realm fits
- Prism
- OmniGuard
This entry sits in the index's predictive wing: a system that scores, ranks, perceives, or steers rather than generates. Realm's runtime layer is built for the generative and agentic systems now moving into these same decision seats, where it watches a model's internal state and holds an unsupported claim or an unchecked action before it commits. The control gap on this record, an automated decision that reached people with no runtime check in front of it, is the same gap. The index keeps predictive failures on the record because the pattern carries straight into the systems shipping today.