Share on LinkedInShare on LinkedIn

ARTICLE · 01 JULY 2026

Bill C-36: Rewriting The Rules For Canadian Private Sector Privacy

Canada's proposed Privacy and Consumer Data Act introduces sweeping changes to private sector privacy regulation, including a new enforcement body with unprecedented penalty powers, mandatory cross-border transfer assessments, and enhanced protections for children's data. Organizations operating in Canada face a fundamental shift from PIPEDA's principles-based approach to a prescriptive compliance regime with significant financial and legal consequences.

CanadaPrivacy

Introduction

On June 15, 2026, Canada’s Minister of Artificial Intelligence and Digital Innovation introduced Bill C-36, An Act to enact the Protecting Privacy and Consumer Data Act, to amend the Personal Information Protection and Electronic Documents Act and to make amendments to other Acts (“Bill C-36”). Bill C-36 represents the federal government’s third attempt at reforming Canada’s private sector privacy regime.

Bill C-36 comes just a few days after the introduction of Bill C-34, An Act to enact the Digital Safety Act and the Digital Safety Commission of Canada Act and to make consequential amendments to other Acts, which seeks to regulate social media, chatbot and online services. Both bills were prefigured in Canada’s national artificial intelligence strategy released on June 4, 2026 and form key parts of this new policy framework.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from