Canada set to One-Up the EU with fines of 5% or $25 Million

Canada has tabled legislation that would go farther than the European Union with fines to the greater of 5% of global revenue up to $25 Million dollars. Bill C-27 – the Digital Charter Implementation Act, 2022, replaces PIPEDA with a three-part regime.

This would create new rules of AI, and includes the Consumer Privacy Protection Act, Artificial Intelligence and Data Act, and Personal Information and Data Protection Tribunal Act.

The changes include granting the Privacy Commissioner broad order-making powers which include things like ordering a company to stop collecting data, or stop using personal information. Imagine that? Social media companies ordered to stop virtually all operations, for example. Businesses need to be prepared.

New rules are proposed to control AI. These include monitoring companies, third party audits, and disclosure of AI technologies. Enforcement includes criminal prosecutions for both unlawful collection of data for AI training, and causing harm or economic loss in the deployment of AI.

In the coming months Privacy Law in Canada Ltd. will breakdown the components of the new Regime, and provide statutory interpretations from the Courts and Regulators about what to expect. Make sure you subscribe to this website to receive this analysis.