A comprehensive new bill introduced in the House of Commons on Monday seeks to modernise Canada’s privacy laws by imposing stricter regulations on how companies manage personal data, particularly concerning children. The legislation, spearheaded by Evan Solomon, Minister of Artificial Intelligence and Digital Innovation, also aims to tackle the controversial issue of surveillance pricing, whereby businesses exploit consumer data to charge varying prices for identical goods.
Key Features of the Bill
The proposed legislation, known as Bill C-36, is set to establish a new federal regulatory body, the Digital Safety and Data Protection Commission of Canada. This agency will oversee the enforcement of updated privacy standards, which include heightened protections for children’s data. As Solomon articulated during the announcement, the bill is designed to “treat children’s personal information as sensitive,” necessitating explicit parental consent for the retention of such data. Moreover, companies will be required to limit the duration for which they hold children’s information compared to that of adults.
Additionally, Canadians will gain the right to request the deletion of their personal data from corporate databases, including any instances of deepfake technology that misappropriates their likeness. Exceptions to this rule exist, such as when data is used for law enforcement purposes or when it does not directly identify an individual.
Transparency and Accountability
The legislation will also mandate greater transparency regarding how companies utilise personal data. Consumers will have the right to inquire about the specific data used in significant decisions, such as credit ratings and mortgage approvals. Furthermore, businesses will need to disclose their usage of artificial intelligence and other automated decision-making processes, thereby increasing visibility into how these systems impact individuals.
Solomon emphasised the public’s demand for transparency, noting that Canadians are increasingly aware of the importance of their data and that of their children. He stated, “We want to protect it, we want some controls – just take care of our kids’ information, it’s something that is very valuable.” This reflects a growing consensus among Canadians that companies must handle personal information with greater responsibility.
Penalties for Non-Compliance
To enforce these new regulations, the proposed bill empowers the Digital Safety and Data Protection Commission to impose substantial penalties on companies that fail to comply with its provisions. The fines could reach up to $10 million or 3% of a company’s global revenue, whichever is greater. This framework aims to ensure that organisations prioritise privacy and data protection in their operations.
Philippe Dufresne, Canada’s Privacy Commissioner, welcomed the introduction of the bill, recognising it as a pivotal advancement for privacy rights in the country. He specifically highlighted the inclusion of provisions that acknowledge privacy as a fundamental right and emphasise the need for privacy impact assessments.
A Necessary Evolution in Privacy Law
The new bill updates the existing Personal Information Protection and Electronic Documents Act (PIPEDA), which has been in place for over 25 years and was developed before the advent of modern digital technologies like artificial intelligence and deepfakes. The legislation will facilitate easier data transfers between businesses, requiring them to act promptly upon receiving a transfer request from individuals.
Moreover, the bill stipulates that businesses must seek informed consent from individuals regarding the handling of their personal data, providing clear explanations of its usage. There are provisions that allow for data collection without consent in specific circumstances, such as emergencies threatening health or safety.
Why it Matters
The introduction of Bill C-36 represents a significant step forward in safeguarding Canadians’ privacy rights, particularly for vulnerable populations like children. As the digital economy continues to expand, the demand for robust data protection measures is paramount. The true test of this legislation will be its implementation and effectiveness in providing meaningful safeguards for individuals navigating an increasingly data-driven landscape. The balance between innovation and privacy is delicate, and this bill aims to ensure that Canadians’ rights are not only protected but respected in the evolving digital age.
