**
In a significant move to modernise Canada’s privacy framework, the government has unveiled a new bill that mandates companies to enhance their data protection practices, particularly concerning children. Introduced in the House of Commons on Monday, the legislation seeks to address pressing concerns around data privacy and surveillance pricing, equipping a new federal regulator with the authority to enforce these vital protections.
Key Features of Bill C-36
The newly introduced Bill C-36 aims to establish stringent requirements for how companies manage personal information, especially that of minors. This legislation will compel businesses to treat children’s data as particularly sensitive, requiring explicit parental consent for its collection and retention. Minister of Artificial Intelligence and Digital Innovation, Evan Solomon, emphasised that the bill aims to safeguard children’s information, stating, “The bill requires companies to treat children’s personal information as sensitive. That means stronger protection when companies collect, use or share information about children.”
Moreover, Canadians will gain the right to request the deletion of their personal data, including instances where AI-generated deepfakes misuse their likenesses. However, the bill outlines exceptions, such as retaining information that does not directly identify individuals or is necessary for law enforcement purposes.
Combatting Surveillance Pricing
A notable aspect of the legislation is its focus on combating surveillance pricing, a controversial practice where retailers use consumer data to charge varying prices for identical products. While the bill does not explicitly mention this issue, Solomon indicated in interviews that the new regulator will be tasked with providing guidance to companies on ethical pricing practices. He stated, “We want to stop price gouging,” highlighting the government’s commitment to ensuring fair pricing practices in the digital marketplace.
Enhanced Transparency and Accountability
The privacy bill seeks to bolster transparency around data practices. Under its provisions, consumers will have the right to inquire about the personal data used in critical decisions, such as mortgage approvals or credit ratings. Additionally, businesses will be required to disclose their use of AI and automated decision-making processes, ensuring that consumers are aware of how their data influences significant decisions.
Solomon reiterated the public demand for clarity in AI decision-making, stating that Canadians increasingly seek “visibility inside how decisions are made by AI.”
New Regulatory Authority
To oversee the expanded privacy regime, the bill proposes the establishment of a new regulatory body, the Digital Safety and Data Protection Commission of Canada. This regulator will have the authority to impose substantial penalties—up to £10 million or 3% of global revenue—on companies that fail to comply with the new privacy standards. Privacy Commissioner Philippe Dufresne welcomed the proposed legislation, calling it “a pivotal step for privacy in Canada” and noting that many of his recommendations have been integrated into the bill.
This legislation will replace the existing Personal Information Protection and Electronic Documents Act (PIPEDA), which has become outdated in light of technological advances over the past 25 years. It aims to facilitate data portability, allowing individuals to transfer their personal information between businesses seamlessly.
Implications for Businesses and Consumers
The introduction of Bill C-36 signals a paradigm shift for companies operating within Canada. They will be required to adopt a more responsible approach to data management, ensuring that personal information is only collected and used in ways that a “reasonable person would consider appropriate.” Furthermore, businesses will need to implement robust privacy safeguards and risk assessments before transferring data outside of Canada.
Vass Bednar, managing director of the Canadian Shield Institute, remarked that while the bill is a promising restart, the true test will be whether it provides Canadians with meaningful protections in the digital economy.
Why it Matters
This legislative initiative reflects a growing recognition of the importance of data privacy in an increasingly digital world. As Canadians become more aware of the implications of their data being collected and used, the government’s commitment to protecting personal information—especially that of children—could set a precedent for privacy legislation globally. By ensuring stronger safeguards and greater transparency, the bill not only aims to enhance consumer trust but also to create a more equitable digital marketplace, vital for the well-being of Canadian citizens in the digital age.
