Canada has introduced significant privacy legislation aimed at regulating the management of personal information in commercial settings. Known as the Protecting Privacy and Consumer Data Act, or Bill C-36, this legislation expands the regulatory powers of a new commission, shifting enforcement responsibilities from the current privacy watchdog to a newly established regulator. The act’s launch comes amidst heightened concerns over digital privacy and the ethical use of technology.
The new bill acknowledges privacy as a fundamental right, mandating that companies must acquire valid consent before collecting personal information. They are required to explain, in clear language, the purposes and potential consequences of such data collection. Additionally, companies must disclose if third parties might have access to this information and allow customers to request the deletion of their personal data. These measures are part of a broader initiative to increase transparency and consumer control over personal data.
Evan Solomon, the Minister of Artificial Intelligence and Digital Innovation, highlighted that the bill forms part of Canada’s national strategy to cultivate trust in emerging technologies. With an emphasis on increasing AI literacy and infrastructure, this initiative reflects the country’s forward-thinking approach to handling technological advancements. Further details on the strategy were announced by Prime Minister Mark Carney, focusing on the ethical dimensions of AI deployment.
Philippe Dufresne, the nation’s privacy watchdog, publicly supported the bill, noting its potential to enhance privacy protections, particularly for children navigating digital spaces. He acknowledged, however, that the enforcement power for commercial privacy issues would move from his office to the newly formed commission, which he plans to evaluate thoroughly.
On the other hand, privacy law expert Michael Geist raised concerns about the formation of this new commission, which will act as a “digital super-regulator” overseeing private-sector regulation and online harms. His criticisms include issues around non-binding rules of evidence, the potential for secret hearings, and decision-making capabilities concentrated in a single appointee chosen by the federal Cabinet.
This legislative move parallels other recent efforts, such as Bill C-34, the Safe Social Media Act, aimed at shielding children from harmful online content and the addictive features of social media. However, it has faced pushback over its invasive age-verification requirements and the unenumerated powers granted to the commission.
The current federal Privacy Act remains in place, which requires government consultation with party leaders from both parliamentary houses and approval from both chambers, setting a framework for how the new act will operate. If the new act passes parliamentary approval, it will designate the privacy watchdog’s jurisdiction exclusively over federal government agencies.
For further insights into the legislative changes and their implications, more details are provided in this report.