In a significant move to enhance data protection, the Canadian government has introduced a new privacy bill aimed at updating the country’s legal framework for personal information management. Announced in the House of Commons on Monday by Evan Solomon, Minister of Artificial Intelligence and Digital Innovation, the legislation seeks to impose stricter obligations on businesses concerning the handling of Canadians’ data, particularly that of children, and to tackle issues related to surveillance pricing.
Stricter Protections for Children’s Data
Central to the proposed bill is an elevated standard for safeguarding personal information pertaining to minors. Companies will be obliged to secure explicit parental consent before collecting or retaining data about children. As Solomon articulated, “The bill requires companies to treat children’s personal information as sensitive,” which implies enhanced protections when collecting, utilising, or sharing such data. This shift signifies a pivotal recognition of the need to prioritise the privacy of younger individuals in the digital landscape.
Furthermore, Canadians will gain the right to request the deletion of their personal data from corporate databases, including synthetic content created via artificial intelligence, such as deepfakes. However, this deletion mandate will come with caveats, allowing exceptions for data that does not personally identify individuals or when information is retained for law enforcement purposes.
Tackling Surveillance Pricing
Another focal point of the legislation is its ambition to combat surveillance pricing, where retailers exploit consumer data to charge varying prices for identical products. Solomon underscored the bill’s intention to curb such practices, asserting it “takes aim at surveillance pricing to stop price gouging.” While the bill does not explicitly reference this pricing strategy, Solomon indicated plans for the newly established regulatory body to provide guidelines on the matter.
The proposed Digital Safety and Data Protection Commission of Canada will be tasked with enforcing these new regulations and could impose hefty penalties—up to £10 million or 3% of a company’s global revenue, whichever is greater—on those failing to comply.
Enhancements in Transparency and Accountability
The bill also introduces measures aimed at increasing transparency in the use of personal data. Consumers will have the right to inquire about the data used in decisions affecting them, such as mortgage approvals or credit ratings. Companies will be required to clarify their use of AI and automated decision-making processes, particularly in circumstances where such technologies significantly impact individuals’ lives.
Solomon remarked on the growing demand for visibility into the decision-making processes of AI, stating that Canadians expect greater accountability from businesses in managing their data. He emphasized, “We want to protect it, we want some controls—just take care of our kids’ information, it’s something that is very valuable.”
Modernising Canada’s Privacy Framework
This legislation, dubbed Bill C-36, seeks to modernise the outdated Personal Information Protection and Electronic Documents Act (PIPEDA), which has remained largely unchanged for over 25 years. The existing framework was established before the rise of AI technologies and the widespread collection of children’s data online. By enabling Canadians to transfer their data between businesses more seamlessly, the bill aims to enhance consumer rights in the digital economy.
Moreover, the legislation stipulates that consent must be clearly obtained for the use of personal information, with explicit explanations provided on its handling. Businesses will only be permitted to collect data that a “reasonable person would consider appropriate,” taking into account various factors, including the sensitivity of the information involved.
Why it Matters
As Canada steps into a new era of digital privacy legislation, the implications of Bill C-36 are profound. Acknowledging the growing public concern over data security, particularly for vulnerable populations like children, this bill not only enhances consumer protections but also sets a precedent for how companies engage with personal information. By prioritising transparency and accountability, Canada is signalling its commitment to safeguarding individual privacy rights in a rapidly evolving digital landscape. This legislation could represent a critical turning point for consumer trust in the digital economy, ensuring that personal data is treated with the respect and protection it deserves.
