Consumer Privacy Protection Act (Canada's Bill C-27): Feedback From Industry Participants

Bill C-27 – the second iteration of Bill C-11 (2020), which died on the order paper in 2021 – is currently at second reading in the House of Commons. Canada's Consumer Privacy Protection Act introduces two new statutes that would make substantial changes to the federal data protection legislation, the Personal Information Protection and Electronic Documents Act (PIPEDA). First, the Consumer Privacy Protection Act (CPPA) would replace Part 1 of PIPEDA, which relates to the protection of personal information. Second, the Personal Information and Data Protection Tribunal Act (PIDPT) would create a new Data Protection Tribunal.

Bill C-27 also introduces the Artificial Intelligence and Data Act (AIDA), which would create a new legal and general framework for the regulation of artificial intelligence (AI). During the second reading of Bill C-27, it was suggested that AIDA be voted on separately from the privacy aspects of the Bill, namely CPPA and PIDPT. The proposal