Vancouver, Canada: Canada is advancing its first major privacy law revision in over 25 years with Bill C-36, the Protecting Privacy and Consumer Data Act. Announced in June, the legislation explicitly recognizes privacy as a fundamental right and aims to strengthen protections for children’s data, improve deletion rights, and mandate transparency for AI-driven decisions impacting individuals.
Bill C-36 emerges as AI applications—like chatbots involved in alarming incidents such as the Tumbler Ridge shooting investigation—face increased scrutiny. The bill includes a framework for responsible use of anonymized data, requiring safeguards against re-identification while supporting research and innovation. “Our responsibility is to protect Canadians online while enabling benefits from emerging technologies,” said Evan Solomon, Canada’s AI and digital innovation minister.
Beyond Data Collection: AI Inference Risks
Experts like Ignacio Cofone of Oxford University argue the core challenge lies not in data gathered, but in what AI systems infer from it. “Models can predict health, behavior, or financial status from minimal traces without traditional data breaches,” Cofone warns. Bill C-36 expands “personal information” to include AI-generated inferences and demands explanations for automated decisions. However, critics note the law focuses on collection rather than regulating algorithmic harm itself.
Protecting Minors in a Digital Age
The bill elevates children’s data as “inherently sensitive,” requiring stricter consent and security measures. Ethical AI lecturer Stephany Oliveros emphasizes user agency: “Knowing my child’s health data should be my choice, not a platform’s default.” MPs also proposed separate legislation last year to block under-16s from social media—though critics like teacher Martin Haucke argue against smartphone use in schools over content bans.
Debates Over De-identified Data Access
While Bill C-36 restricts reconstructing identities from anonymized data, journalist Eric Wishart cautions against hindering public oversight. “Locking down socio-economic data could shield corporations from human rights investigations,” notes Oliveros. The bill maintains exemptions for journalism but risks limiting researchers from accessing granular datasets—sparking debates over balancing privacy with accountability.
As AI evolves to predict behaviors and influence outcomes, Canada’s approach remains a global benchmark. Solomon affirmed ongoing collaboration with experts to ensure adaptable safeguards. Yet experts agree: privacy laws must address not just data collection, but the downstream impacts of AI itself.
Future Steps for AI Governance
“Privacy rights empower individuals,” Oliveros concluded, framing the law as a tool to shift power dynamics. Ma, founder of a child-focused AI startup, highlights algorithmic fairness as the next frontier. With AI reshaping industries, Canada’s challenge remains aligning rapid technological progress with ethical, enforceable regulation.
| Key Provision | Implication |
| Inference Data Protections | Addresses algorithmic predictions beyond traditional data collection |
| Juvenile Data Rights | Strengthened deletion rights and security for under-18s |
| Automated Decision Transparency | Requires explanations for AI-driven outcomes |
