In a significant move towards safeguarding personal data, the Canadian government has introduced a comprehensive privacy bill that mandates companies to enhance protections for children’s information and grants consumers the right to request the deletion of their personal data. Unveiled on Monday in the House of Commons by Evan Solomon, Minister of Artificial Intelligence and Digital Innovation, this legislation seeks to modernise privacy regulations in the digital age, addressing concerns around surveillance pricing and enhancing transparency in data usage.
Enhanced Protections for Children’s Data
The proposed legislation, known as Bill C-36, sets a new benchmark for how companies handle data related to minors. Under this bill, firms will be obliged to treat children’s information as particularly sensitive, requiring explicit consent from parents before retaining this data. Solomon emphasised that the bill aims to ensure stronger safeguards when collecting, using, or sharing information about individuals under 18.
“Canadians have reached the point where they say, look, ‘We know our data is important, we know our kids’ data is important. We want to protect it, we want some controls – just take care of our kids’ information, it’s something that is very valuable,’” Solomon noted. This response reflects a growing demand among Canadians for rigorous accountability from companies regarding the data they collect, particularly that of younger users.
Tackling Surveillance Pricing and Enhancing Transparency
Beyond protecting children, the bill also targets the practice of surveillance pricing, where retailers exploit consumer data to charge varying prices for the same products. While the legislation does not explicitly mention surveillance pricing, Solomon indicated plans to instruct the new regulatory body on issuing guidance concerning this practice once established.
Moreover, the bill mandates companies to provide clarity on how personal data influences critical decisions, such as mortgage approvals or credit ratings. Canadians will have a right to inquire about the specific data used in such determinations, thereby fostering a culture of transparency. As Solomon pointed out, “People want visibility inside how decisions are made by AI,” highlighting a public desire for clearer insights into automated decision-making processes.
Establishing a New Regulatory Framework
A key component of Bill C-36 is the introduction of a new regulatory authority—the Digital Safety and Data Protection Commission of Canada. This body will oversee the enforcement of the updated privacy regime, with the power to impose substantial penalties on non-compliant companies, including fines of up to $10 million or 3% of global revenue, whichever is higher.
Privacy Commissioner Philippe Dufresne welcomed the proposed legislation, describing it as a pivotal step for privacy in Canada. He noted that many of his recommendations had been adopted, including the recognition of privacy as a fundamental right and the necessity for privacy impact assessments.
The bill also updates the existing Personal Information Protection and Electronic Documents Act (PIPEDA), modernising the legislative framework that has been in place for over 25 years. With the rapid advancement of technology—including AI and deepfake capabilities—this reform is seen as essential for the current digital landscape.
Facilitating Consumer Control Over Personal Data
Under the new law, Canadians will gain enhanced control over their personal information. They will be able to request data transfers from one business to another and withdraw consent for data usage at any time. Businesses must clearly articulate the purpose of data collection and ensure that any use of personal information aligns with what a reasonable person would consider appropriate.
These changes reflect a broader shift towards greater consumer rights in the digital economy, positioning Canadians to have a more significant say in how their data is managed and protected.
Why it Matters
The introduction of Bill C-36 marks a transformative moment for data protection in Canada. As digital interactions become increasingly pervasive, this legislation stands to empower consumers, particularly parents, in safeguarding their children’s personal information while enhancing accountability among businesses. It signals a commitment from the Canadian government to adapt to the challenges posed by modern technology, ensuring that privacy is not just an afterthought but a fundamental right recognised and protected in the digital age.
