Rules / Canada

Bill C-36, Protecting Privacy and Consumer Data Act

ProposedBillNon-binding

Government bill to replace federal private-sector privacy law, including a requirement that organisations be transparent about using automated decision systems for significant decisions about individuals, stronger protection for children's data, and limits on surveillance pricing. It applies to private-sector organisations handling personal information.

Why it matters

This, not a stand-alone AI act, is the likely vehicle for binding federal rules on automated decision-making in Canada.

What it requires

Transparency to usersData governanceConsumer rightsPenalties

Penalties

Proposed: administrative penalties up to CAD 10 million or 3% of global revenue; fines up to CAD 25 million or 5% for serious offences.

SourceISED Canada news release: https://www.canada.ca/en/innovation-science-economic-development/news/2026/06/government-of-canada-tables-new-legislation-to-protect-childrens-data-strengthen-privacy-and-build-trust-in-the-digital-economy.html Checked against the source on 4 Oct 2026. Some details could not be confirmed from a primary source. Tabled 15 Jun 2026 (ISED news release, which confirms the ADM transparency duty and penalty levels; enforced by a new Digital Safety and Data Protection Commission). LEGISinfo blocks automated access, so the parliamentary stage beyond tabling is unconfirmed.

Cite this record

Bill C-36, Protecting Privacy and Consumer Data Act. Government of Canada (ISED). Status: Proposed. wheresthe.ai, https://wheresthe.ai/rule/ca-bill-c36-protecting-privacy-consumer-data-2026/ (verified 4 Oct 2026).

Line of Thought

Developments connected to this rule

What has happened that this rule shapes, or that shapes it. Pick one to keep following the thread.

More from Canada

  • AI for All
    StrategyInnovation, Science and Economic Development Canada (Minister of Artificial Intelligence and Digital Innovation)Non-binding
    In forceEffective 4 Jun 2026
  • Protecting Victims Act (sexual deepfakes)
    LawParliament of Canada (Department of Justice)Binding
    In forceEffective 18 Jul 2026
  • Directive on Automated Decision-Making
    RegulationTreasury Board of Canada SecretariatBinding
    In forceEffective 1 Apr 2019
  • OSFI E-23
    GuidelineOffice of the Superintendent of Financial Institutions (OSFI)Binding
    Enacted, not yet in forceApplies 1 May 2027
  • Ontario AI-in-hiring disclosure
    RegulationGovernment of Ontario (Ministry of Labour, Immigration, Training and Skills Development)Binding
    In forceEffective 1 Jan 2026