In a significant move to modernise its privacy framework, the Canadian government introduced a new bill in the House of Commons this week, mandating stricter data protection measures. This legislation, aimed not only at safeguarding personal information but also at addressing the issue of surveillance pricing, will require companies to take greater responsibility in handling data—especially that of minors.
Enhancing Protections for Children’s Data
One of the cornerstone provisions of the proposed bill is the heightened standard for managing the personal data of children. Companies will be obliged to obtain explicit consent from parents before collecting or retaining any information pertaining to individuals under 18. Minister of Artificial Intelligence and Digital Innovation, Evan Solomon, emphasised that this legislation treats children’s data as particularly sensitive, necessitating stronger safeguards when companies collect, utilise, or share such information.
In his remarks, Solomon noted, “The bill requires companies to treat children’s personal information as sensitive. That means stronger protection when companies collect, use or share information about children.” The bill aims to ensure that data retention periods for minors are shorter than those for adults, reflecting a growing recognition of the need to protect vulnerable populations in the digital space.
Tackling Surveillance Pricing
The legislation also seeks to combat the controversial practice of surveillance pricing, where retailers adjust prices based on individual shopping behaviours. Although the bill itself does not explicitly mention this practice, Solomon indicated plans for the new federal regulator to provide guidance on how companies should navigate these issues. He stated, “We want to stop price gouging,” while acknowledging that beneficial uses of data, such as loyalty programmes, must still be considered.
The establishment of a new regulatory body, the Digital Safety and Data Protection Commission of Canada, will be central to overseeing compliance with these new provisions. This regulator will have the authority to impose significant penalties—up to $10 million or 3% of a company’s global revenue, whichever is higher—for non-compliance.
Enhancing Consumer Transparency
Beyond protections for children, the bill promises to enhance transparency for all Canadians regarding the use of their personal data. Consumers will have the right to request information about what personal data influenced decisions, such as those related to mortgage approvals or credit ratings. Solomon reiterated the public’s desire for clarity in how AI-driven decisions are made, stating, “People want visibility inside how decisions are made by AI.”
The legislation will also facilitate easier data transfers between businesses, empowering individuals to move their personal information as they see fit. Businesses will be required to comply with requests for data transfers in a timely manner, thus promoting a more consumer-friendly environment in the digital economy.
Privacy as a Fundamental Right
Privacy Commissioner of Canada, Philippe Dufresne, welcomed the introduction of the bill, highlighting its potential to enshrine privacy as a fundamental right. He expressed satisfaction that many of his recommendations were reflected in the bill, particularly those concerning the interests of children and the necessity for stronger enforcement capabilities. “This bill represents a pivotal step for privacy in Canada,” he remarked.
The proposed changes update the existing Personal Information Protection and Electronic Documents Act (PIPEDA), which has not kept pace with technological advancements over the past 25 years. As new challenges such as AI and deepfakes emerge, this legislation aims to provide a robust framework for protecting Canadians’ personal information in an increasingly digital world.
Why it Matters
This legislative initiative is a crucial step in establishing a forward-thinking privacy regime that prioritises the protection of individuals, particularly children, in the digital landscape. By addressing both the misuse of personal data and the ethical implications of AI, the Canadian government is not only seeking to restore public trust but also to position itself as a leader in the global conversation surrounding digital rights and safety. The success of this bill could set a benchmark for other nations grappling with similar challenges, making it a pivotal moment in the evolution of privacy laws in Canada and beyond.