In a significant move to update the country’s privacy framework, the Canadian government has introduced a new bill in the House of Commons that mandates stricter data protection measures, particularly for children. Unveiled by Evan Solomon, the Minister of Artificial Intelligence and Digital Innovation, this legislation seeks to empower consumers by giving them the right to request the deletion of their personal data and to combat practices such as surveillance pricing, where consumers are charged differently based on their shopping behaviours.
Enhanced Protections for Children
One of the cornerstone features of the proposed bill is the establishment of heightened standards for the handling of children’s data. Solomon emphasised that companies must treat the personal information of minors as sensitive, necessitating explicit parental consent for its collection and retention. The bill stipulates that such information should be stored for a shorter duration compared to that of adults, thereby ensuring a higher level of security for younger users.
“The bill requires companies to treat children’s personal information as sensitive,” Solomon stated, highlighting the necessity for robust protections when companies collect, utilise, or share data related to children. This legislative change responds to a growing public demand for stricter controls over the data collected from minors, with Canadians increasingly recognising the importance of safeguarding not just their own information but that of their children as well.
Right to Delete and Increased Transparency
The new legislation also empowers Canadians with the right to request the deletion of their personal data from companies, including contentious practices like deepfakes—where AI is employed to create misleading representations of individuals. However, there are exceptions to this deletion mandate, particularly when data is necessary for law enforcement or if it does not directly identify an individual.
In addition to these rights, the bill introduces measures aimed at increasing transparency regarding how companies utilise personal data. Consumers will have the ability to inquire about the data influencing significant decisions, such as mortgage approvals or credit ratings. Solomon remarked, “People want visibility inside how decisions are made by AI,” acknowledging the public’s desire for clarity in a world increasingly dominated by automated systems.
Establishing a New Regulatory Body
The proposed legislation, known as Bill C-36, will establish a new regulatory entity tasked with overseeing Canada’s expanded privacy regime, previously announced alongside the Safe Social Media bill on June 11. This new body, dubbed the Digital Safety and Data Protection Commission of Canada, will hold the authority to impose penalties on companies that fail to comply with the new regulations, with fines potentially reaching up to $10 million or 3% of a company’s global revenue, whichever is higher.
Philippe Dufresne, Canada’s Privacy Commissioner, heralded the bill as a pivotal step forward for privacy rights in the country. He expressed satisfaction that many of his recommendations were incorporated into the legislation, particularly the recognition of privacy as a fundamental right and the explicit prioritisation of children’s interests.
A Modern Approach to Data Protection
This new bill is a crucial update to the Personal Information Protection and Electronic Documents Act (PIPEDA), which has been in place for over 25 years. The original framework was established before the widespread use of AI and the collection of children’s data online. The enhancements proposed in Bill C-36 reflect the evolving landscape of data privacy and the need for regulations that account for modern technological advancements.
Among other provisions, the bill mandates businesses to seek consent in a clear and comprehensible manner for the collection of personal information, as well as to facilitate the transfer of data between organisations upon consumer request. Companies will be required to justify their data collection practices, ensuring that they are deemed appropriate under the circumstances.
Why it Matters
The introduction of Bill C-36 represents a significant leap forward in the safeguarding of personal data in Canada, particularly for the most vulnerable demographic—children. With its emphasis on transparency, consent, and accountability, this legislation not only addresses pressing concerns about data exploitation but also empowers consumers to take control of their digital identities. As the digital economy continues to expand, the successful implementation of these regulations will be crucial in ensuring that Canadians can navigate this landscape with confidence and security.
