Parliament returns Monday, April 13
Back to Bills
C-27At consideration in committee in the House of Commons

New Law Proposed to Protect Consumer Privacy Online, Create Data Tribunal, and Regulate Artificial Intelligence

Online Privacy and AI Regulation Law

Introduced Jun 16, 2022·Last discussed Apr 24, 2023
Summary

This proposed law, called C-27, aims to give Canadians more control over their personal information when companies collect, use, and share it online. It would create a new set of rules that businesses must follow to protect your privacy. For example, companies would need to be more transparent about how they use your data and get your clear consent in many cases. The proposed law also sets up a special group, called a tribunal, to handle disagreements and make decisions about privacy issues. This proposed law would affect almost everyone in Canada who uses the internet or interacts with businesses online. It matters because it could change how companies handle your data, potentially giving you more say over what happens to your personal information. It also creates a way for you to complain and seek solutions if you believe a company has misused your data. Ultimately, the goal is to balance the needs of businesses with the privacy rights of individuals in the digital age.

Where This Lands on Key Issues

Where this proposed law falls on the policy spectrums that Canadians care about

Business & Worker RulesStrengthen worker protections

The bill introduces new regulations on how businesses handle personal information, increasing the compliance burden and potentially impacting business operations. This suggests a move towards prioritizing consumer rights over minimizing regulations on businesses.

Identity & Human RightsExpand protections for marginalized groups

By creating new rules for privacy and data use, the bill strengthens individual control over personal information, which can be seen as a proactive measure to protect identity and human rights in the digital sphere.

This bill
Bill Quality
Solid

This proposed law aims to protect personal information in commercial activities and sets rules for using AI. It creates a tribunal to handle disputes, but leaves some important details to be decided later through regulations.

Things to Watch For

  • Watch for how the "reasonable person" standard is interpreted in practice.
  • The law doesn't specify exactly how anonymization should be done.
  • It's unclear how the new tribunal will interact with existing privacy regulators.
  • The law does not fully address how it will apply to organizations operating in multiple provinces with different privacy laws.
  • The details of administrative penalties will be set later in regulations.
Progress

Click any step to learn what it means

What Do You Think?

Loading...

Discussion

Sign in to join the discussion.

Loading comments...