In a significant stride towards enhancing digital privacy, the Canadian government has unveiled a new bill aimed at overhauling the nation’s privacy framework. Introduced in the House of Commons on Monday, the legislation seeks to impose stricter regulations on companies regarding the handling of personal data, particularly when it comes to children. This legislative move is poised to bolster consumer rights and address the troubling practice of surveillance pricing, where consumers face varying prices based on their shopping habits.
Enhanced Protections for Children’s Data
Under the proposed legislation, known as Bill C-36, companies will be mandated to adopt heightened standards for the protection of children’s personal information. This entails obtaining explicit consent from parents before retaining any data related to minors. “The bill requires companies to treat children’s personal information as sensitive,” explained Evan Solomon, Minister of Artificial Intelligence and Digital Innovation, during the bill’s launch. He emphasised that this initiative aims to ensure stronger safeguards when companies collect, use, or share information pertaining to children.
The bill also allows Canadians to request the deletion of their personal data, including instances of deepfake technology misuse. However, there are specific exemptions, particularly concerning data that does not directly identify individuals or information required for law enforcement purposes.
Tackling Surveillance Pricing and Transparency
A crucial feature of the bill is its focus on combating surveillance pricing. Solomon articulated that the bill “takes aim at surveillance pricing to stop price gouging.” While the legislation does not explicitly mention this pricing strategy, he indicated plans for the new regulatory body to provide guidance on the issue once established. The bill aims to enhance transparency regarding how companies use Canadians’ data, allowing consumers to understand which personal data influenced decisions such as mortgage approvals or credit ratings.
Further, companies will be required to disclose their use of artificial intelligence and automated decision-making processes, particularly in significant matters affecting individuals. Solomon remarked that Canadians have expressed a desire for “visibility inside how decisions are made by AI,” highlighting the growing demand for accountability in the digital landscape.
A New Regulatory Body to Enforce Compliance
The newly proposed legislation will establish the Digital Safety and Data Protection Commission of Canada, a regulatory body tasked with overseeing the expanded privacy regime. This body will possess the authority to impose penalties of up to $10 million or 3% of a company’s global revenue, whichever is greater, for non-compliance. This dual mandate, which merges the previous Digital Safety Commission with data protection responsibilities, marks a pivotal shift in Canada’s approach to digital privacy.
Philippe Dufresne, Canada’s Privacy Commissioner, welcomed the bill, calling it a “pivotal step for privacy in Canada.” He acknowledged the incorporation of many recommendations he had put forth, including the recognition of privacy as a fundamental right and the need for privacy impact assessments.
Modernising Outdated Legal Frameworks
This new bill is a comprehensive update to the existing Personal Information Protection and Electronic Documents Act (PIPEDA), which has been in place for over 25 years. Given that the original legislation predates the widespread use of artificial intelligence and the collection of children’s data online, this update is both timely and necessary. It aims to facilitate the transfer of personal data between businesses and ensure that consent is sought in clear language, with individuals empowered to withdraw consent at any time.
Additionally, the bill outlines conditions under which companies may collect personal information without prior consent, such as emergencies threatening individual safety. It mandates robust privacy safeguards and risk assessments before any personal information is transferred outside Canada.
Vass Bednar, managing director of the Canadian Shield Institute, remarked that while the bill is a welcome development, its effectiveness will ultimately depend on whether it provides meaningful protections for Canadians within the digital economy.
Why it Matters
The introduction of Bill C-36 marks a watershed moment for digital privacy in Canada, especially regarding the safeguarding of children’s data and the mitigation of exploitative pricing practices. As technology continues to evolve, this legislation represents an essential step toward ensuring that Canadians have greater control over their personal data and the decisions that affect their lives. The implications of these changes will resonate across the digital landscape, setting a precedent for privacy standards and consumer rights in an increasingly interconnected world.
