The Federal Government introduced Bill C-27, the Digital Charter Implementation Act, in the House of Commons on June 16, 2022.
Minister of Innovation, Science and Industry, François-Philippe Champagne, stated that the Bill’s goals are to strengthen Canada’s private sector privacy framework, create new rules for the responsible development and use of artificial intelligence (AI), and continue to advance the implementation of Canada’s Digital Charter. If adopted, Bill C-27 would result in the creation of three new laws: the Consumer Privacy Protection Act (CPPA), the Personal Information and Data Protection Tribunal Act, and the Artificial Intelligence and Data Act.
CRIC is generally supportive of initiatives to strengthen privacy rules in Canada, as these force other industries to adopt a higher standard in how they manage data.
Before the Bill becomes law, it will go through an extensive review process. CRIC, with the support of its Privacy Committee, will be actively involved in the process to provide our industry’s perspective on the proposed laws and to ensure it does not introduce any unintended impediments in how CRIC members conduct their affairs.
Bill C-27’s proposed Consumer Privacy Protection Act (CPPA), which would replace the decades old PIPEDA, seeks to increase Canadians’ ability to control information held about them by organizations, provide more freedom to move or request disposal of their personal information, and establish strong privacy protection for minors. The CPPA would also increase the powers of the Privacy Commissioner of Canada and establish significant fines for non-compliance (up to 5% of global revenues or $25 million, whichever is greater).