Canada Tables Sweeping New Federal Privacy Law

Bill C-36, The Protecting Privacy and Consumer Data Act: What It Means For Your Business

Bill C-36, the Protecting Privacy and Consumer Data Act, would represent the most significant overhaul of Canada's private sector privacy regime in more than 25 years. The legislation would replace the private sector provisions of PIPEDA with a new framework that introduces stronger enforcement powers, new individual rights, and mandatory requirements for organizations transferring personal information outside of Canada.

While the bill is still in its early stages and many of the key compliance details will be determined through future regulations, organizations should begin paying close attention. New requirements around privacy management programs, privacy impact assessments, and cross-border data transfers could have significant operational implications for businesses of all sizes.

Click here to read our full analysis regarding what is changing, what remains uncertain, and what to expect next.