Share on LinkedInShare on LinkedIn

ARTICLE · 23 OCTOBER 2026

M&A Lawyers Take Note: What Bill C-36 Could Mean For Transactions

Bennett Jones LLP
Bennett Jones LLP
Contributor
Bennett Jones LLP

Bennett Jones LLP

Bennett Jones is one of Canada’s premier business law firms. With deep experience in complex...

View firm profile
Explore more from Bennett Jones LLP

Bill C-36 proposes sweeping changes to Canada's privacy landscape through the Protecting Privacy and Consumer Data Act, introducing penalties up to $25 million and private rights of action for non-compliance. How will these unprecedented enforcement mechanisms reshape M&A due diligence, contractual protections, and risk allocation in transactions involving personal data?

CanadaCorporate/Commercial Law

In June 2026, the federal government introduced Bill C-36 to enact the Protecting Privacy and Consumer Data Act (PPCDA). A key change from the current regulatory regime is the prospect of significant liability arising from non-compliance. This key change could materially affect the privacy risks associated with M&A transactions in such a way that transaction parties may need to revisit both: (i) the scope of privacy-related due diligence; and (ii) the contractual protections negotiated to address those risks.

This blog examines some of the key considerations for dealmakers as they assess the potential implications of the PPCDA in the context of M&A transactions.

New Risks under Proposed Legislation

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from