In a significant move to modernise Canada’s privacy legislation, the federal government has introduced a new bill in the House of Commons that seeks to enhance protections for personal data, particularly that of children, and to curb discriminatory pricing practices in the retail sector. Presented by Evan Solomon, the Minister for Artificial Intelligence and Digital Innovation, the bill aims to ensure that Canadians have greater control over their personal information while holding companies accountable for their data handling practices.
Enhanced Protections for Children’s Data
The cornerstone of the newly proposed legislation is its commitment to protecting the personal information of minors. Under this bill, companies will be mandated to treat children’s data with heightened sensitivity, which could necessitate obtaining explicit consent from parents before collecting or retaining such information. Minister Solomon emphasised that this approach is vital, stating, “The bill requires companies to treat children’s personal information as sensitive. That means stronger protection when companies collect, use or share information about children.”
This initiative reflects a broader societal demand for safeguarding the digital footprints of the younger generation, recognising the importance of their data in today’s interconnected world. Canadians will also have the right to request the deletion of their personal data, including synthetic representations or deepfakes that misuse their likeness. However, exceptions will apply, particularly concerning data retained for law enforcement purposes or that which does not directly identify individuals.
Addressing Surveillance Pricing
A notable provision of the legislation is its focus on tackling surveillance pricing—an often opaque practice where retailers charge different prices based on consumers’ shopping behaviours. Solomon highlighted the bill’s intention to confront this issue head-on, stating it “takes aim at surveillance pricing to stop price gouging.” While the bill does not explicitly mention this practice, the Minister indicated plans to empower a new federal regulator to provide guidance on how companies should approach their pricing strategies in light of consumer data.
This new regulatory framework aims to enhance transparency surrounding how companies utilise data in making significant decisions, such as those related to mortgages or credit ratings. Canadians will have the right to inquire about the personal data that influenced these decisions, fostering a culture of accountability that has been increasingly demanded by the public.
Creation of a New Regulatory Authority
The proposed legislation, known as Bill C-36, will establish a new regulatory body that will oversee Canada’s expanded privacy regime. This body, to be renamed the Digital Safety and Data Protection Commission of Canada, will be tasked with enforcing the new privacy standards. It will have the authority to impose hefty fines—up to $10 million or 3% of a company’s global revenue—on firms that fail to comply with the regulations.
Philippe Dufresne, Canada’s Privacy Commissioner, praised the bill, noting it represents a pivotal step forward for privacy rights in the country. He expressed satisfaction that many of his recommendations were integrated into the legislation, particularly the recognition of privacy as a fundamental right and the explicit consideration of children’s best interests.
Modernising Outdated Legislation
The introduction of this bill serves as a modernisation of the existing Personal Information Protection and Electronic Documents Act (PIPEDA). Nearly three decades old, the current legislation has struggled to keep pace with rapid technological advancements, including the rise of artificial intelligence and the pervasive collection of children’s data online. The new bill aims to simplify the process for individuals to transfer their data between businesses, ensuring that consent is sought in clear, understandable terms and that individuals can withdraw their consent at any time.
The legislation also places significant emphasis on evaluating the necessity of data collection. Companies will be required to justify their data handling practices based on the context and sensitivity of the information, ensuring that they consider less intrusive alternatives wherever possible.
Why it Matters
This legislative overhaul marks a crucial step toward establishing a robust framework for data protection in Canada, directly responding to public concerns over privacy and data security in an increasingly digital landscape. By prioritising the safeguarding of children’s data and introducing stringent measures against unfair pricing practices, the government is not only enhancing consumer rights but also fostering trust in digital commerce. As Canadians become more aware of their digital rights and the value of their personal information, this bill could set a precedent for privacy protection that resonates well beyond national borders.
