Omanghana
The Canadian government has unveiled sweeping new privacy legislation aimed at modernizing the country’s data protection framework and strengthening oversight of the digital economy. Introduced on June 15, 2026, Bill C-36, known as the Protecting Privacy and Consumer Data Act (PPCDA), proposes a major restructuring of how privacy rules are enforced in the private sector.
Tabled by Minister of Artificial Intelligence and Digital Innovation Evan Solomon, the legislation represents the federal government’s third attempt to replace Canada’s decades-old privacy regime with a more comprehensive and modern framework.
New Commission to Oversee Private-Sector Privacy
One of the most significant changes under Bill C-36 is the creation of the Digital Safety and Data Protection Commission of Canada, a new centralized regulator that would assume responsibility for enforcing privacy rules in the private sector.
Under the proposed structure, the Office of the Privacy Commissioner of Canada (OPC) would continue to oversee privacy matters involving federal government institutions, while jurisdiction over businesses and commercial organizations would shift to the newly established commission.
The legislation also provides for the appointment of a dedicated Privacy and Consumer Data Commissioner, selected by the federal Cabinet, to lead the commission’s specialized privacy division.
Expanded Responsibilities Beyond Data Protection
The proposed regulator would have a broader mandate than its predecessor, combining oversight of private-sector privacy compliance with responsibilities related to digital safety and online platforms.
In addition to enforcing the provisions of Bill C-36, the commission would also play a role in administering rules connected to Bill C-34, the proposed Safe Social Media Act, including aspects of platform accountability and online harms.
Stronger Enforcement Powers
Bill C-36 would significantly increase the government’s ability to enforce privacy requirements by granting the new commission powers that extend beyond the advisory role traditionally associated with privacy oversight.
Among the proposed enforcement measures are:
- The authority to issue legally binding orders requiring organizations to change their data handling practices.
- Administrative monetary penalties of up to $10 million or 3% of an organization’s global annual revenue, whichever is greater, for certain violations.
- Court-imposed fines reaching $25 million or 5% of global revenue for the most serious offences.
These provisions are intended to encourage stronger compliance with Canada’s evolving data protection standards.
Key Privacy Reforms
The legislation would replace major portions of the aging Personal Information Protection and Electronic Documents Act (PIPEDA) and introduce several new protections for individuals.
Among its notable features, Bill C-36 would:
- Formally recognize privacy as a fundamental right under Canadian law.
- Give individuals the ability to request the deletion of personal information, including AI-generated deepfakes or digital content that uses their likeness.
- Require organizations to provide greater transparency about automated decision-making systems, including artificial intelligence used in processes such as loan approvals or eligibility assessments.
- Classify children’s personal information as inherently sensitive, subjecting it to enhanced safeguards and stricter handling requirements.
Debate Over Independence and Oversight
While the federal government has promoted Bill C-36 as part of its broader vision for responsible innovation and digital governance, the proposal has sparked debate among legal experts and policymakers.
Some critics argue that transferring private-sector privacy enforcement from an independent parliamentary office to a Cabinet-appointed commission could weaken institutional independence and raise questions about accountability.
Others have voiced concerns that consolidating authority over both privacy regulation and online content oversight may grant the government too much influence over Canada’s digital landscape.
As Bill C-36 moves through the legislative process, it is expected to generate significant discussion among businesses, privacy advocates, technology companies, and civil society groups over the future of data protection and digital rights in Canada.
Source: Omanghana
