In a significant move towards modernising the country’s privacy framework, the Canadian government has introduced a new bill aimed at bolstering protections for personal data, particularly that of children. The legislation, unveiled by Evan Solomon, Minister of Artificial Intelligence and Digital Innovation, in the House of Commons on Monday, will impose new obligations on companies to handle data responsibly and ensure transparency in their practices.
Key Provisions of the New Privacy Bill
The proposed legislation, known as Bill C-36, outlines a series of robust measures that will compel companies to take greater responsibility for the data they collect. One of the critical elements is the heightened standard for safeguarding children’s data, which will now be treated with increased sensitivity. Companies will be required to obtain explicit consent from parents before retaining any personal information related to minors.
Mr. Solomon remarked on the importance of this new directive, stating, “The bill requires companies to treat children’s personal information as sensitive. That means stronger protection when companies collect, use or share information about children.” This initiative reflects a growing consensus among Canadians that the data of their youth is invaluable and necessitates stringent protective measures.
Combatting Surveillance Pricing
Another pivotal aspect of Bill C-36 addresses the issue of surveillance pricing, a practice where retailers charge varying prices for the same item based on consumer data and shopping habits. While the bill does not explicitly mention this practice, Solomon hinted that the newly established regulatory body would soon provide guidance to businesses on how to navigate this issue.
“Our aim is to tackle price gouging effectively,” he stated during the launch. He also emphasised the need to ensure that beneficial uses of data, such as loyalty programmes, are not hindered by the new regulations.
Enhanced Consumer Rights and Transparency
The bill will empower Canadians to request the deletion of their personal data, including instances of deepfakes—where artificial intelligence manipulates images to create misleading representations. However, certain exceptions will exist, particularly for data that does not identify individuals or is necessary for law enforcement purposes.
Moreover, the legislation mandates that businesses disclose the types of personal data used in significant decisions, such as those affecting mortgage approvals or credit ratings. Solomon expressed the public’s demand for a clearer understanding of how AI influences decision-making processes, stating, “People want visibility inside how decisions are made by AI.”
Establishing a New Regulatory Authority
To oversee the implementation of these changes, Bill C-36 proposes the establishment of a new regulatory body, the Digital Safety and Data Protection Commission of Canada. This body will hold the authority to impose fines of up to $10 million or 3% of a company’s global revenue for non-compliance.
Philippe Dufresne, Canada’s Privacy Commissioner, welcomed the introduction of the bill, acknowledging that many of his recommendations were integrated. “This represents a pivotal step for privacy in Canada,” he stated, highlighting the recognition of privacy as a fundamental right and the explicit considerations for children’s best interests.
A Modern Response to Evolving Challenges
The proposed legislation seeks to modernise the outdated Personal Information Protection and Electronic Documents Act (PIPEDA), which has not been substantially updated in over 25 years. The new bill will facilitate greater portability of personal data, allowing individuals to transfer their information between businesses with ease. Consent will be paramount, with clear guidelines provided to consumers on how their data will be handled.
Furthermore, the legislation outlines conditions under which data can be collected without prior consent, particularly in emergencies that threaten health or safety, thus striking a balance between individual rights and societal needs.
Why it Matters
Bill C-36 marks a crucial step forward in reinforcing privacy protections in an increasingly digital world. By explicitly addressing the vulnerabilities of children and tackling unethical pricing practices, the legislation aims to empower consumers and enhance transparency. As Canada navigates the complexities of the digital economy, this bill not only reflects public sentiment regarding data privacy but also sets a precedent for future regulations. It is a vital initiative that underscores the importance of responsible data stewardship in safeguarding the interests of Canadians.
