Canada has introduced new data protection regulations legislation The handling of personal data in commercial activities is to be regulated on Monday. Concerns center on the bill’s expansion of the regulatory powers of an existing commission.
The Protecting Privacy and Consumer Data Act, also known as Bill C-36, recognizes privacy as a fundamental right. Companies must obtain valid consent before collecting personal data from their consumers. This requires companies to disclose the purposes and consequences of the collection in plain language. Companies must also inform consumers about the types of information they collect and whether third parties may have access to the information. Additionally, customers can request that companies delete their personal data.
Additionally, the law authorizes the new commission and its commissioner to enforce the law, with the commissioner initiating and investigating complaints. Companies must submit their data protection management program to the Commission upon request.
Evan Solomon, Minister of Artificial Intelligence and Digital Innovation, said The bill is part of the country’s national AI strategy to “build trust in new technologies.” On June 4, Prime Minister Mark Carney announced the strategy to improve AI competency and build a basic AI infrastructure.
Philippe Dufresne, the country’s data protection officer, welcomed the bill. In his Monday statement, Dufresne said the bill would significantly improve Canadians’ privacy as they navigate the digital world and protect the privacy of children. Dufresne noted that the law transfers authority to enforce data protection regarding commercial activities from his office to the new commission and said he would review the bill before submitting his recommendations to Parliament.
Michael Geist, professor of data protection law at the University of Ottawa, criticized the bill to create a “new digital super-regulator” responsible for both private sector regulation and online harm policing. He noted that the rules of evidence were not binding on the commission and that it could hold secret hearings. He also expressed concerns that the commission could make a decision even if there was only one candidate appointed by the federal cabinet.
The current federal Data Protection Act requires the government to consult party leaders in both the Senate and the House of Commons and obtain approval from both chambers. If Parliament approves the current draft law, the data protection authority will only be responsible for federal authorities.
On June 10, the government introduced Bill C-34, the Safe Social Media Act, which would enact a new digital security law. The bill aims to protect children from intimate content, the addictive nature of social media and other materials that could endanger their safety or that of others. However, the bill faced backlash because it “very invasive“Age verification requirement and not listed what powers the new commission has.
