The Canadian government is poised to establish a new regulatory body that aims to tackle the complex challenges of digital safety and data protection. Dubbed the Digital Safety and Data Protection Commission of Canada, this agency will oversee a wide array of responsibilities, including policy formulation, complaint management, and the regulation of how companies handle personal information. As the framework for this extensive commission begins to take shape, concerns are mounting over whether it can effectively manage its ambitious mandate.
An Expanding Mandate
Initially outlined in a recent piece of legislation aimed at social media regulation, the commission’s purpose has rapidly evolved. Now, with the introduction of a new bill to reform Canada’s privacy laws, the commission’s scope has expanded dramatically. It is set to become a formidable authority tasked with not only regulating online platforms but also ensuring the protection of personal data, particularly for vulnerable populations like children.
Michael Walsh, a lawyer specialising in government affairs and privacy at Gowling WLG, remarked on the unprecedented nature of such a comprehensive regulator. The merging of online safety and private-sector privacy responsibilities under one umbrella is a significant shift, moving these duties away from the existing Office of the Privacy Commissioner.
The Intersection of Privacy and Technology
The implications of this new regulatory approach extend far beyond mere compliance. Issues surrounding data collection, potential misuse of personal information, and the burgeoning field of artificial intelligence are now intertwined within the commission’s mandate. Historically, the Canadian government has struggled to legislate effectively in these rapidly evolving domains. Under Prime Minister Justin Trudeau, there have been two previous attempts to update privacy legislation, both of which have faced challenges.
The current administration, led by Prime Minister Mark Carney, links the promotion of AI with the necessity of robust privacy protections. However, as Mr Carney’s government delegates significant policy decisions to the new commission, it raises questions about the capacity and clarity of its future operations. For instance, Minister of Artificial Intelligence Evan Solomon has indicated that the commission will develop guidelines to address surveillance pricing—where companies leverage personal data to determine pricing strategies. Yet, the breadth of responsibilities placed upon the commission raises serious concerns about its capacity to fulfil its mandates effectively.
A Bureaucratic Challenge Ahead
The establishment of this regulatory behemoth will not be without its difficulties. Setting up such an expansive body is bound to present significant bureaucratic hurdles. Experts suggest that hundreds of new positions will need to be created to manage the myriad functions, from handling consumer complaints to enforcing penalties against non-compliant companies.
The Canadian Transportation Agency’s struggles with a backlog of passenger complaints serve as a cautionary tale for what could unfold if the Digital Safety and Data Protection Commission is not adequately resourced. Moreover, as many of the existing functions of the Privacy Commissioner are dismantled and restructured, the new commission will have a vast array of standards to establish before it can hold companies accountable. Experts estimate that this process may take two years or longer.
While Canadian businesses are somewhat familiar with the complexities of privacy impact assessments and management plans, uncertainty looms over how the new commission will interpret these regulations. Companies are left in a precarious position, unsure of the rules they will face in the near future.
The Potential for Overload
The ambitious design of the Digital Safety and Data Protection Commission could lead to a paradox: the desire for a comprehensive regulatory framework may result in an entity that is too burdened to operate effectively. With such a wide-ranging mandate covering everything from policy advocacy to investigative roles, concerns are mounting that the commission may struggle to find its footing.
As Michael Geist, Canada Research Chair in Internet and E-commerce Law at the University of Ottawa, points out, having an entity that functions simultaneously as judge, jury, advocate, and investigator raises pressing questions about accountability and transparency. These issues will undoubtedly come under scrutiny as the proposed legislation makes its way through Parliament.
Why it Matters
The establishment of the Digital Safety and Data Protection Commission signals a significant shift in how Canada approaches digital regulation and privacy protection. In a world increasingly dominated by technology, the effectiveness of this new body will be critical in shaping the landscape of online safety and personal data rights. As governments worldwide grapple with similar challenges, Canada’s efforts may set a precedent—one that could redefine the balance between innovation and privacy in the digital age. However, if the commission becomes mired in bureaucratic complexities, its potential to enact meaningful change may remain unrealised, leaving Canadian citizens at risk in an ever-evolving digital frontier.
