A significant shift in Canada’s approach to digital privacy began on Monday as the government introduced a comprehensive new bill in the House of Commons. This legislation, which seeks to modernise the country’s privacy framework, mandates that companies enhance their responsibilities regarding the handling of personal data, particularly that of minors. It also empowers a new federal regulator to address practices such as surveillance pricing, where customers face variable pricing based on their shopping behaviours.
Enhanced Protections for Children’s Data
Under this proposed legislation, known as Bill C-36, companies will be compelled to treat the personal information of individuals under 18 as particularly sensitive. Minister of Artificial Intelligence and Digital Innovation, Evan Solomon, emphasised the need for stricter controls during a press conference, stating, “The bill requires companies to treat children’s personal information as sensitive. That means stronger protection when companies collect, use or share information about children.”
Parents will now be required to provide explicit consent for the retention of their children’s data, and this information must be stored for shorter periods than that of adults. Solomon echoed the sentiment of many Canadians, asserting that there is a growing expectation for businesses to handle data responsibly, particularly when it concerns the privacy of young users.
New Regulator to Combat Surveillance Pricing
The new legislation also establishes a regulator with the authority to oversee compliance with these updated privacy standards. This body, which will replace the previously proposed Digital Safety Commission, aims to provide clarity and enforcement in the complex landscape of data protection. Solomon indicated that while the bill does not explicitly mention surveillance pricing, he will instruct the new regulator to provide guidance on this issue once it is operational.
The bill introduces substantial penalties for non-compliance, which could reach up to $10 million or 3% of a company’s global revenue, ensuring that businesses remain accountable in their data practices. This is a crucial component of the bill, as it aims to curtail discriminatory pricing models that exploit consumer data.
Transparency and Consumer Control
In a bid to enhance transparency, the bill empowers Canadians to request details on how their personal information has been used in decision-making processes, such as in mortgage or credit evaluations. This move aims to demystify the increasingly opaque algorithms that govern many aspects of contemporary life. Solomon noted, “People want visibility inside how decisions are made by AI,” highlighting the public’s demand for greater insight into automated processes that significantly affect their lives.
Moreover, Canadians will now have the right to request the deletion of their data, including instances of deepfake technology that misuse their likeness. However, certain exceptions will apply, particularly when the data does not directly identify individuals or is required for law enforcement purposes.
Modernising Canada’s Privacy Framework
This new bill marks a pivotal update to the Personal Information Protection and Electronic Documents Act (PIPEDA), which has remained largely unchanged for over 25 years. Given the rapid advancements in technology and the emergence of deepfake content, this legislative revision is both timely and necessary. The proposed changes aim not only to enhance consumer protections but also to facilitate the transfer of personal data between businesses, making it easier for individuals to manage their information.
Furthermore, the bill mandates that consent for data collection must be obtained in a clear and understandable manner, reinforcing the principle that individuals should have control over their personal information. Businesses will now be required to justify the appropriateness of their data collection methods, taking into account the sensitivity of the information and exploring less intrusive alternatives where feasible.
Why it Matters
The introduction of Bill C-36 signifies a crucial step towards safeguarding Canadians’ digital privacy in an environment increasingly dominated by technological advancements and data-driven business models. With heightened protections for minors, clear guidelines on data usage, and robust penalties for non-compliance, this legislation aims to build a more secure and transparent digital landscape. As Canadians become more aware of the value of their personal information, the government’s commitment to reforming privacy laws reflects a broader societal shift towards accountability and ethical data management in the digital age. This is not merely a regulatory update; it is a fundamental reassessment of how society values and protects personal data in a rapidly evolving technological context.
