In a significant move to modernise its privacy framework, the Canadian government introduced a new bill on Monday aimed at enhancing protections for personal data, particularly concerning children. The proposed legislation would mandate companies to take greater responsibility for handling sensitive information and provide Canadians with greater control over their data. Minister of Artificial Intelligence and Digital Innovation, Evan Solomon, emphasised the bill’s intent to address issues like surveillance pricing, where consumers are charged different prices based on their shopping behaviours.
Enhanced Protections for Children’s Data
Under the new bill, known as Bill C-36, companies will face stricter regulations regarding the collection and management of children’s personal information. Solomon announced that the legislation is designed to treat data pertaining to minors as particularly sensitive, necessitating explicit parental consent for retention. “The bill requires companies to treat children’s personal information as sensitive. That means stronger protection when companies collect, use or share information about children,” he stated during the announcement.
In addition to the heightened standards, the bill outlines that children’s data must be retained for shorter periods compared to adults. This provision aims to ensure that children’s digital footprints are minimised, aligning with the growing awareness of the importance of safeguarding young users in the online environment.
Addressing Surveillance Pricing
A notable feature of the proposed legislation is its focus on surveillance pricing. Solomon highlighted the need to combat price discrepancies based on consumer data, asserting that the government aims to “take aim at surveillance pricing to stop price gouging.” While the bill does not explicitly mention surveillance pricing, the minister indicated plans for a new regulatory body to provide guidance on the practice once established.
This regulatory oversight is expected to enhance transparency in how companies utilise data for pricing strategies, ensuring that Canadians are not unfairly penalised based on their purchasing history. This will empower consumers to make informed choices and foster a fairer marketplace.
Greater Control and Transparency for Canadians
In a bid to increase consumer agency, the bill would allow Canadians to request the deletion of their personal data from company records, including information used in deepfake technologies. However, there are exceptions to this rule, particularly for data that does not directly identify individuals or is required for law enforcement purposes.
The legislation aims to bolster transparency, obliging companies to clarify how they are using personal data in significant decision-making processes, such as mortgage or credit assessments. Solomon noted that Canadians are eager for “visibility inside how decisions are made by AI,” reflecting a demand for accountability in automated systems that impact their lives.
Furthermore, the bill would modernise the existing Personal Information Protection and Electronic Documents Act (PIPEDA), originally enacted over 25 years ago. This update is crucial in light of rapid technological advancements and the increasing prevalence of data collection practices that were not envisioned when the original law was drafted.
New Regulatory Authority with Teeth
The introduction of a new federal regulator, the Digital Safety and Data Protection Commission of Canada, underscores the government’s commitment to enforcing these privacy standards. This body will wield the authority to impose significant penalties—up to £10 million or 3% of a company’s global revenue, whichever is greater—on organisations that fail to comply with the new regulations.
Privacy Commissioner Philippe Dufresne welcomed the bill, asserting that it represents a pivotal step for privacy rights in Canada. He highlighted the importance of recognising privacy as a fundamental right and ensuring that children’s best interests are prioritised in data management.
The bill also facilitates easier data transfer between businesses, enabling Canadians to move their personal information as they see fit. Companies will be required to seek clear consent for the use of personal data, ensuring that individuals are fully informed about how their information is handled.
Why it Matters
This legislation marks a crucial turning point in Canada’s approach to privacy rights, particularly in an era where digital data is increasingly vulnerable to misuse. By prioritising the protection of children’s data and addressing practices like surveillance pricing, the government not only aims to enhance consumer trust but also to foster a more equitable and transparent digital marketplace. As Canadians become more aware of the value of their data, this bill could serve as a model for other nations grappling with similar challenges in the digital age.
