A significant overhaul of Canada’s privacy framework was introduced in the House of Commons on Monday, spearheaded by Evan Solomon, the Minister of Artificial Intelligence and Digital Innovation. The proposed legislation, known as Bill C-36, seeks to impose stricter obligations on companies for safeguarding personal data, particularly that of children, while also addressing the contentious issue of surveillance pricing.
Strengthening Protections for Children’s Data
Under the new bill, businesses will be mandated to treat the personal information of minors with heightened sensitivity. This could lead to requirements for companies to obtain explicit consent from parents before collecting or retaining such information, alongside stipulations to limit the retention period for minors’ data compared to adults. Solomon emphasised the necessity of these measures, stating, “The bill requires companies to treat children’s personal information as sensitive. That means stronger protection when companies collect, use or share information about children.”
The implications of this move are profound, as it aligns with growing public concern over children’s safety in the digital landscape. Canadians are increasingly aware of the value of their data and that of their children, urging for greater control and protection. Solomon aptly noted, “Canadians have reached the point where they say, look, ‘We know our data is important, we know our kids’ data is important. We want to protect it, we want some controls.’”
Tackling Surveillance Pricing
Another key aspect of Bill C-36 is its focus on curbing surveillance pricing—an issue that has raised eyebrows across the country as retailers have been known to charge differing prices based on consumers’ shopping behaviours. While Solomon’s announcement did not explicitly define surveillance pricing, he indicated that the new regulatory body will provide guidance on this practice. The bill empowers a new federal authority, the Digital Safety and Data Protection Commission of Canada, to oversee these changes, marking a proactive step in addressing consumer rights and transparency.
“People want visibility inside how decisions are made by AI,” Solomon stated, reflecting a growing demand for accountability in automated decision-making processes that significantly impact Canadians’ lives.
Enhanced Transparency and Consumer Rights
The proposed legislation aims to enhance transparency regarding how companies utilise Canadians’ personal data. Consumers will be granted the right to inquire about the information that informed decisions related to financial products like mortgages or credit ratings. Moreover, businesses will be compelled to disclose their use of AI and automated processes when making significant decisions about individuals.
Under the new regime, Canadians will also have the ability to request the deletion of their personal data, including instances of deepfake technology that misrepresent individuals. However, there are exceptions to this rule, particularly for data that does not directly identify an individual or information retained for law enforcement purposes.
Solomon noted that Canadians expect companies to be responsible stewards of their data, insisting that “it is not controversial to tell companies to treat the information that they are collecting with a higher degree of responsibility.”
Regulatory Power and Enforcement
The oversight of this expanded privacy framework will fall to the newly established Digital Safety and Data Protection Commission of Canada, which will have the authority to impose significant penalties on non-compliant companies—up to £10 million or three per cent of global revenue, whichever is greater.
Philippe Dufresne, the Privacy Commissioner of Canada, welcomed the bill, calling it “a pivotal step for privacy in Canada.” He highlighted the incorporation of several recommendations from his office, including the recognition of privacy as a fundamental right and the explicit consideration of children’s best interests in data handling.
As a substantial update to the Personal Information Protection and Electronic Documents Act (PIPEDA), which has been in place for over 25 years, this new legislation seeks to adapt to a landscape transformed by AI and digital innovations.
Why it Matters
The introduction of Bill C-36 represents a critical juncture in Canada’s approach to privacy and consumer rights in the digital age. As society grapples with the implications of rapid technological advancements, this legislation offers a framework aimed at protecting the most vulnerable, particularly children, while balancing the needs of businesses to innovate and utilise data responsibly. The success of these measures will ultimately depend on their implementation and the will of both consumers and corporations to uphold these new standards.
