In a significant move to modernise its privacy framework, the Canadian government has introduced a new bill aimed at enhancing the protection of personal data, particularly that of children. Announced on Monday by Evan Solomon, the Minister of Artificial Intelligence and Digital Innovation, this legislation seeks to update the country’s existing privacy laws and establish a new regulatory body to oversee compliance and enforcement.
Key Features of the New Privacy Bill
The proposed legislation, designated as Bill C-36, imposes stricter obligations on companies to safeguard the personal information of minors. It includes measures that require businesses to secure explicit parental consent before collecting or retaining data related to children. Solomon emphasised that the bill elevates the status of children’s data, mandating that companies treat such information with an enhanced level of sensitivity.
“Companies must now be held accountable for how they collect, use, and share information pertaining to children,” Solomon stated during the bill’s unveiling. The initiative also empowers Canadians, granting them the right to request the deletion of their personal information, including synthetic media created through artificial intelligence, such as deepfakes.
Combatting Surveillance Pricing
A notable aspect of the bill is its intention to tackle the practice of surveillance pricing, where retailers utilise consumer data to set variable prices for identical goods. Although the bill does not explicitly mention this practice, Solomon indicated that he would instruct the new regulator to provide guidance to businesses on its implications once established. “This legislation aims to end the unfairness of price gouging,” he stated, recognising that while data can facilitate beneficial loyalty programmes, it should not be exploited for undue advantage.
Establishing a New Regulatory Framework
The bill proposes the creation of the Digital Safety and Data Protection Commission of Canada, a regulatory body tasked with enforcing the updated privacy regulations. This commission will possess the authority to impose significant penalties—up to CAD 10 million or 3 per cent of a company’s global revenue—on organisations that fail to comply with the new requirements.
Philippe Dufresne, the Privacy Commissioner of Canada, praised the bill as a critical advancement for privacy rights in the country. “This legislation signifies a vital step for privacy in Canada,” he remarked, highlighting its recognition of privacy as a fundamental right and the importance of protecting children’s data.
Modernising Outdated Legislation
Bill C-36 seeks to replace the outdated Personal Information Protection and Electronic Documents Act (PIPEDA), which was enacted over 25 years ago, prior to the widespread adoption of digital technology and the internet. The new legislation includes provisions that will facilitate the transfer of personal data between organisations and requires clear consent protocols, ensuring that individuals are well informed about how their information will be managed.
Moreover, the bill outlines conditions under which companies can collect and use personal data without prior consent, such as in emergencies or when it serves the clear interests of the individual involved. It also stipulates that businesses must conduct privacy impact assessments and take reasonable measures to protect user data, particularly when transferring it outside the country.
Why it Matters
The introduction of Bill C-36 marks a pivotal moment in Canada’s approach to data privacy, reflecting a growing recognition of the importance of safeguarding personal information in an increasingly digital world. As Canadians become more aware of the value of their data, this legislation aims to empower individuals while fostering a culture of accountability among businesses. The effectiveness of these new measures will be closely monitored, as stakeholders seek to determine whether they will genuinely enhance the protection of personal information in an era where digital interactions are ubiquitous.
