In a significant move on Monday, the Canadian government unveiled a new bill aimed at modernising the country’s privacy regulations. The proposed legislation mandates stricter protections for children’s data and establishes protocols allowing Canadians to request the deletion of their personal information. This bill, presented in the House of Commons by Evan Solomon, Minister of Artificial Intelligence and Digital Innovation, also aims to combat practices like surveillance pricing, where companies charge varying prices based on consumer behaviour.
Stricter Protections for Children’s Data
A key component of the new legislation is its focus on safeguarding the personal information of minors. Under the proposed bill, companies will be required to handle children’s data with heightened sensitivity, necessitating explicit parental consent for data retention. Solomon emphasised the importance of this change, stating, “The bill requires companies to treat children’s personal information as sensitive,” thereby ensuring stronger protections throughout the data lifecycle.
This initiative reflects growing concerns over the collection and use of minors’ data in a digital landscape where children are increasingly targeted by online services. The legislation is expected to impose significant restrictions on how companies collect, use, and share information regarding individuals under the age of 18.
A New Regulator with Expanded Powers
The bill, designated as Bill C-36, proposes the establishment of a new regulatory body, the Digital Safety and Data Protection Commission of Canada. This agency will oversee the enforcement of the updated privacy laws and will have the authority to impose substantial penalties—up to £10 million or 3% of a company’s global revenue, depending on which is greater—for non-compliance.
This regulatory framework represents a shift towards a more proactive stance on data protection, enabling the government to address issues such as surveillance pricing. While the legislation does not explicitly mention this practice, Solomon indicated that guidance on it would be sought from the new regulator upon its establishment.
Enhanced Transparency and Consumer Control
In addition to bolstering protections for children, the bill aims to enhance transparency regarding how businesses utilise personal data. Canadians will gain the right to inquire about the specific personal information employed in decisions such as mortgage approvals or credit ratings. This transparency extends to companies’ use of artificial intelligence, ensuring that consumers are informed about the automated processes affecting significant decisions in their lives.
Solomon noted the public’s desire for “visibility inside how decisions are made by AI,” reflecting a broader demand for accountability in data-driven decisions. The legislation is set to reinforce the principle that companies must handle consumer information responsibly and transparently, as the public increasingly prioritises data privacy.
Modernising Canada’s Privacy Framework
The proposed bill serves as a revision of the existing Personal Information Protection and Electronic Documents Act (PIPEDA), a piece of legislation that has remained largely unchanged for over 25 years. Given the rapid advancements in technology and the rise of practices like deepfakes, this overhaul is both timely and necessary.
The new framework will simplify the process for Canadians wishing to transfer their data between businesses and will require clearer communication regarding how their information is processed and retained. Businesses will be obligated to collect personal information only for purposes deemed appropriate by a “reasonable person,” with strict guidelines on the circumstances under which data can be collected without consent.
Why it Matters
This privacy bill represents a pivotal shift in Canada’s approach to data protection, aligning with global trends towards stricter regulations in the digital realm. As citizens become increasingly aware of their data’s value and the potential for misuse, this legislation could empower Canadians with greater control over their personal information. The successful implementation of these measures will not only enhance consumer trust but may also set a new standard for privacy legislation worldwide, positioning Canada as a leader in digital rights and data protection.
