Canada’s new federal privacy legislation, Bill C-27

On June 16, the Canadian government introduced Bill C-27, the Digital Charter Implementation Act 2022. The Act proposes to enact three new pieces of federal legislation:

  1. The Consumer Privacy Protection Act (CPPA) to replace Part 1 of the Personal Information Protection and Electronic Documents Act (PIPEDA) 
  2. The Personal Information and Data Protection Tribunal Act
  3. The Artificial Intelligence and Data Act (AIDA) to regulate artificial intelligence systems and the processing of data in connection with such systems

Enforcements

Organizations guilty of an indictable offense are liable to:

  • A fine of up to 5% of global revenue or CA $25 million 

For other select violations of the Consumer Privacy Protection Act: 

  • Administrative monetary penalties of up to 3% of global revenue or CA$10 million