Latest
  1. Johns Hopkins Bayview tells 3,182 patients an employee put their health data into a public AI tool
  2. China’s AI compute access expected to double in 2027, with US-designed chips about 65 per cent
  3. UK commits £100m to national AI Biosecurity Lab
  4. Moonshot AI releases Kimi K3.1 Pro with 1-million-token context window
  5. Residents in Newport and Cardiff oppose hyperscale datacentres near homes
  6. Study: Grok 4.7 picked Republicans in 92% of forced midterm answers, GPT-6.1 Sol picked Democrats in 97%
  7. Attackers exploiting the PHP flaws hand the break-in to AI agents, Unit 42 says
  8. Elvis Presley’s rightsholders sue Anthropic over training on 274 songs

Rules / Canada

Bill C-36, Protecting Privacy and Consumer Data Act

ProposedBillNon-binding

Government bill to replace federal private-sector privacy law, including a requirement that organisations be transparent about using automated decision systems for significant decisions about individuals, stronger protection for children’s data, and limits on inappropriate uses of personal information, which the government says include surveillance pricing. It applies to private-sector organisations handling personal information.

Why it matters

Canada is likely to set binding federal rules on automated decision-making through this bill instead of a stand-alone AI act.

What it requires

Transparency to usersData governanceConsumer rightsPenalties

Penalties

Proposed: administrative penalties up to CAD 10 million or 3% of global revenue; fines up to CAD 25 million or 5% for serious offences.

SourceISED Canada news release: https://www.canada.ca/en/innovation-science-economic-development/news/2026/06/government-of-canada-tables-new-legislation-to-protect-childrens-data-strengthen-privacy-and-build-trust-in-the-digital-economy.html Checked against the source on 4 Oct 2026. Some details could not be confirmed from a primary source. Tabled 15 June 2026 (ISED news release, which confirms the automated-decision transparency duty and penalty levels; enforced by the Digital Safety and Data Protection Commission of Canada, an expanded version of the Digital Safety Commission proposed in Bill C-34). LEGISinfo showed the bill at second reading in the House of Commons on 13 Oct 2026. The bill text does not mention surveillance pricing; the government’s backgrounder does.

Cite this record

WTA-R-CA-0005: Bill C-36, Protecting Privacy and Consumer Data Act. Government of Canada. wheresthe.ai, https://wheresthe.ai/rule/ca-bill-c36-protecting-privacy-consumer-data-2026/ (checked 4 Oct 2026).

History

  • Summary changed from …(nothing)… to …inappropriate uses of personal information, which the government says include…

More from Canada