On July 10, 2026, Canada announced Bill C-36, the Protecting Privacy and Consumer Data Act, marking the country's first significant update to private-sector privacy legislation in over 25 years. This legislation aims to address the challenges posed by artificial intelligence (AI) and data privacy, explicitly recognizing privacy as a fundamental right.
Overview of Bill C-36 and Its Implications
Bill C-36 introduces several key reforms, including enhanced protections for children's personal information, improved deletion rights, and increased transparency in automated decision-making. The bill responds to growing concerns about AI's role in privacy violations, especially in light of recent incidents, such as the Tumbler Ridge shooting in British Columbia, where the suspect allegedly used ChatGPT prior to the attack.
Canada's Minister of AI and Digital Innovation, Evan Solomon, stated, "The government's responsibility is to protect Canadians online and to ensure Canadians can benefit from artificial intelligence and emerging technologies. These goals are not mutually exclusive." The bill aims to establish a framework for the responsible use of de-identified data, incorporating safeguards to minimize the risk of re-identification.
Addressing Inferred Information and Privacy Challenges
Experts emphasize that the evolution of AI technology poses new challenges for privacy legislation. According to Ignacio Cofone, a professor at the University of Oxford, the primary concern is not just the data collected by companies, but what AI can infer from that data. "Older privacy law assumes the danger is in what a company collects from you. The danger now is in what a company infers about you from data you never handed over," Cofone explained.
This shift in focus from data collection to inference highlights the need for regulations that target harmful uses of AI. Bill C-36 expands the definition of personal information to include inferred data and mandates organizations to provide explanations for certain automated decisions. This is a crucial step in addressing the potential for AI to make predictions about individuals based on patterns in their online behavior.
Strengthening Protections for Children Online
One of the most significant aspects of Bill C-36 is its emphasis on protecting children's privacy. The legislation designates information belonging to individuals under 18 as inherently sensitive, thereby raising the standards for consent and security. Cofone noted, "It will help, modestly, and less than the framing suggests. The bill does two things for children: It treats a child’s information as sensitive, which raises the bar for consent and security, and it gives children a stronger deletion right."
Furthermore, experts argue that more comprehensive measures are needed to safeguard children online. Jill Ma, a tech founder specializing in children's AI products, pointed out that privacy is not just about data control but also about preventing misjudgments by algorithms. "A child’s early digital footprint shouldn’t become a lifelong label," she said.
- Bill C-36 introduces enhanced privacy protections for children.
- It expands the definition of personal information to include inferred data.
- Organizations must explain automated decisions that affect individuals.
🤖 This article was rewritten by Feed and Figures' editorial AI from a report originally published by Al Jazeera. Facts and quotes are preserved from the original; the rewrite focuses on clarity and structure. For the unedited original, see the source link below.
