In a significant move towards enhancing digital privacy, the Canadian government has introduced a pivotal piece of legislation aimed at modernising the nation’s privacy framework. Bill C-36, presented in the House of Commons on Monday, mandates stricter data protection measures for children and empowers consumers to request the deletion of their personal information. It also seeks to address the controversial practice of surveillance pricing, where retailers exploit consumer data to charge varying prices for the same products.
A New Era of Data Protection
At the forefront of this initiative is Evan Solomon, the Minister of Artificial Intelligence and Digital Innovation, who emphasised the bill’s dual focus on safeguarding sensitive data and preventing price discrimination based on consumer behaviour. “This legislation takes aim at surveillance pricing to stop price gouging,” Solomon stated, clarifying that while the bill does not explicitly mention surveillance pricing, guidance will be sought from the new regulatory body once established.
The proposed law establishes a higher standard for the handling of children’s personal information, requiring companies to obtain explicit consent from parents for data retention. “The bill requires companies to treat children’s personal information as sensitive,” Solomon noted, highlighting the need for stronger protections when it comes to data related to minors. This marks a significant shift in policy, reflecting a growing recognition of the importance of safeguarding the most vulnerable online users.
Empowering Consumers in the Digital Age
Under Bill C-36, Canadians will gain the right to request the deletion of their personal data from companies, including content generated by deepfake technology. However, there will be exceptions to this rule, particularly concerning data retained for law enforcement purposes or information that does not directly identify individuals.
The legislation also enhances transparency, obliging companies to disclose how personal data influences critical decisions, such as credit ratings or mortgage approvals. Solomon remarked that citizens desire “visibility inside how decisions are made by AI,” reinforcing the call for accountability in automated processes that significantly impact people’s lives.
Establishing a Regulatory Framework
The newly proposed Digital Safety and Data Protection Commission of Canada will oversee the expanded privacy regime, which is part of a broader effort to ensure compliance with the updated regulations. This body, which evolved from the previously announced Digital Safety Commission, will have the authority to impose substantial penalties on companies that fail to meet their obligations, with fines reaching up to CAD 10 million or 3% of global revenue.
Philippe Dufresne, Canada’s Privacy Commissioner, endorsed the bill, hailing it as a “pivotal step for privacy in Canada.” He welcomed the recognition of privacy as a fundamental right and the commitment to protecting children’s data as a substantial achievement in the legislative process.
Modernising an Outdated Framework
The new legislation represents a crucial update to the Personal Information Protection and Electronic Documents Act (PIPEDA), which has remained largely unchanged for over 25 years. The original framework was developed before the digital landscape was transformed by the advent of artificial intelligence and the widespread collection of data from children online.
Bill C-36 will facilitate the transfer of personal information between businesses, requiring them to comply promptly with requests from users. Furthermore, organisations must ensure that they collect and use personal data only for purposes deemed appropriate by a reasonable person, taking into account the sensitivity of the information involved.
Why it Matters
This legislative reform is a watershed moment for Canadian digital privacy, reflecting a growing societal demand for greater accountability from companies in their handling of personal data. By prioritising the protection of children’s information and empowering consumers with rights over their data, Canada is positioning itself as a leader in digital rights. As the nation navigates the complexities of the digital economy, the effectiveness of these measures will ultimately determine whether Canadians feel truly secure in their online interactions.
