Bill C-36, “An Act to enact the Protecting Privacy and Consumer Data Act, to amend the Personal Information Protection and Electronic Documents Act and to make amendments to other Acts” was introduced today to replace the privacy provisions of PIPEDA. The new Digital Safety Commission (from Bill C-34) would replace the Privacy Commisioner for enforcement. It includes provisions directed to consent (implied/explicit), de-identification/ anonymization, “automated decision systems”, scraping email addresses, and a requirement to delete personal information upon request.
The proposed PPCDA represents the most significant change to Canada’s private-sector privacy law in over 25 years. It builds on feedback received through continuous engagement with a wide variety of stakeholders since 2018, as well as parliamentary reports, and previous proposed legislation. The PPCDA will establish clear guardrails to protect Canadians’ personal information in a rapidly changing digital world, with a particular focus on children’s personal information, while supporting responsible innovation, a stronger economy, and Canada’s digital and data sovereignty.