The Canadian government has introduced significant new legislation aimed at modernising the nation’s privacy framework, placing stricter requirements on companies regarding the handling of personal data, particularly that of children. The proposed Bill C-36, unveiled in the House of Commons by Evan Solomon, Minister of Artificial Intelligence and Digital Innovation, seeks to protect Canadians from invasive data practices and bolster transparency in digital transactions.
Strengthening Protections for Children
One of the key features of Bill C-36 is its focus on enhancing protections for minors. The legislation mandates that companies treat children’s personal information with heightened sensitivity, necessitating explicit parental consent for data retention. “The bill requires companies to treat children’s personal information as sensitive,” Solomon explained, underscoring the need for stronger safeguards in how firms collect, utilise, and disseminate information about younger users.
As concerns grow over the exploitation of children’s data in the digital landscape, this legislation aims to ensure that minors are afforded a level of protection commensurate with their vulnerability. Solomon reiterated that Canadians expect companies to handle such data responsibly, stating, “We want to protect it, we want some controls – just take care of our kids’ information, it’s something that is very valuable.”
Tackling Surveillance Pricing
Another notable aspect of the bill is its intention to combat “surveillance pricing,” a controversial practice where retailers charge different prices based on consumers’ shopping habits and personal data. Although the bill does not explicitly mention this practice, the Minister indicated that the new regulatory body would provide guidance on the matter. Solomon described the initiative as a necessary step to halt price gouging, illustrating a growing recognition of the need for fairness in consumer pricing strategies.
This regulatory framework aims to enhance transparency in data usage. Canadians will have the right to inquire about the personal data used in decisions affecting them, such as mortgage approvals or credit ratings. The new rules will also mandate that companies disclose their use of artificial intelligence and automated decision-making processes, areas where many Canadians seek greater clarity.
Establishing a New Regulatory Body
To enforce the provisions of Bill C-36, a new regulatory body will be established, known as the Digital Safety and Data Protection Commission of Canada. This body will replace the previously proposed Digital Safety Commission and will be equipped with the authority to impose fines of up to $10 million or 3% of a company’s global revenue for non-compliance. This dual mandate reflects the government’s commitment to both digital safety and data protection in an increasingly complex technological landscape.
Philippe Dufresne, Canada’s Privacy Commissioner, praised the introduction of the bill, calling it a pivotal advancement for privacy rights in Canada. He highlighted the recognition of privacy as a fundamental right and the explicit protections for children as key successes of the proposed legislation.
Updating Outdated Regulations
Bill C-36 aims to modernise the existing Personal Information Protection and Electronic Documents Act (PIPEDA), which has been in place for over 25 years and was established long before the rise of AI technologies and widespread data collection practices. The new legislation includes provisions to facilitate data portability, allowing individuals to transfer their personal information between businesses more easily, thereby promoting consumer choice and competition.
Furthermore, the bill stipulates that consent must be clearly sought and explained in plain language, with individuals retaining the right to withdraw their consent at any time. Businesses will be required to demonstrate that their collection and use of personal information is appropriate, taking into account the sensitivity of the data and the necessity of the intended purpose.
Why it Matters
The introduction of Bill C-36 marks a significant evolution in Canada’s approach to data privacy, reflecting a growing recognition of the importance of protecting individual rights in the digital age. As technology continues to advance, the implications of this legislation could resonate far beyond the borders of Canada, potentially influencing global standards for data protection and privacy. By prioritising the rights of consumers, particularly the most vulnerable, this bill not only aims to enhance trust in digital markets but also sets a precedent for responsible corporate behaviour in an increasingly data-driven world.
