An IAPP analysis of Bill C-36, the Protecting Privacy and Consumer Data Act, Canada’s long-awaited private-sector privacy reform. The bill would recognize privacy as a fundamental right, strengthen consent and deletion rights, add protections for children’s data, and shift private-sector enforcement from the Office of the Privacy Commissioner to a new Digital Safety and Data Protection Commission with significant penalty powers (up to CAD 25 million or five percent of global revenue for the most serious offences). It amends PIPEDA and arrives alongside the government’s “AI for All” strategy and a proposed Safe Social Media Act.
The piece is archived here for its coverage of the NDP’s response. Surveillance pricing — a signature Avi Lewis policy plank — is addressed by the bill only obliquely, which the NDP leader criticized:
“The bill doesn’t ban this disturbing practice — in fact, it doesn’t even mention it by name. Instead, it just promises vague regulatory action in the future.”
The analysis also captures the wider reaction: Privacy Commissioner Philippe Dufresne welcomed the recognition of privacy as a fundamental right and the stronger enforcement powers while reserving judgment on transferring private-sector authority away from his office; University of Ottawa law professor Michael Geist warned that removing an Agent of Parliament from private-sector privacy enforcement after decades warrants extended public consultation rather than being folded into a lengthy bill. AI Minister Evan Solomon said directing the new regulator to publish surveillance-pricing guidance would be one of his first acts once the bill passes.
See also the same-day Canadian Press report on the surveillance pricing timeline archived for this date.