ARTICLE · 27 MARCH 2023

Does Your Organization Have The Right Kind Of Consent? Proposed Changes To Consent Requirements Under The CPPA

Lawson Lundell LLP

The proposed Consumer Privacy Protection Act ("CPPA") is intended to replace the Personal Information and Electronic Documents Act ("PIPEDA"). The current text of the CPPA will make a number...

CanadaPrivacy

Ryan Berger

Emily Raymond

Author LinkedIn connections

The proposed Consumer Privacy Protection Act ("CPPA") is intended to replace the Personal Information and Electronic Documents Act ("PIPEDA"). The current text of the CPPA will make a number of significant changes to some of the consent requirements Canadian private sector organizations must obtain.

See our previous blog about CPPA's proposed privacy management program requirements.

Consent Requirements in the CPPA

The CPPA includes more defined requirements for valid consent than its predecessor, PIPEDA. It is not new that organizations must obtain an individual's consent before they can collect, use, and disclose their personal information. CPPA proposes more prescriptive requirements to obtain valid consent. In future, an organization must provide the following information:

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

Does Your Organization Have The Right Kind Of Consent? Proposed Changes To Consent Requirements Under The CPPA

Consent Requirements in the CPPA

Related Articles

Privacy, Data Protection, And Cybersecurity: What Foreign Companies Must Consider Before Entering The Canadian Market

Privacy Class Actions: The Professional Information Exception Under Scrutiny In Québec

Lois sur la protection des renseignements personnels : Faire des affaires au Canada 2026

Les Actualités À Noter Selon Fasken : Protection Des Renseignements Personnels Et Cybersécurité Au Canada, Aux États-Unis Et Dans L’Union Européenne (Septembre 2026)

Fasken’s Noteworthy News: Privacy & Cybersecurity In Canada, The US, And The EU (September 2026)

Read more about

Related Comparative Guides

Data Protection & Cybersecurity

See more popular content from

The Price Of A Data Breach: Target Reaches $10M Settlement In U.S. Privacy Class Action

Canadian Privacy Regulators Publish Findings And Guidance On OpenAI Privacy Compliance

CRTC Releases Guidelines On CASL Consent Records

Quebec's Privacy Law 25: What You Need To Know

OPC Issues New PIPEDA Guidance On Assessing Third-Party Service Providers

Bill C-36 and the Future of Canada’s Federal Private Sector Privacy Law: What Has Changed, What It Means, and What to Do Now

New Rule Clarifies Circumstances Requiring Breach Reporting Under Ontario PHIPA

New Rules For Mandatory Privacy Breach Notification In Canada: What U.S. Organizations Need To Know

Bill C-36: What Businesses Need To Know About The Proposed Privacy Overhaul

Canada’s Privacy Reset: Bill C-36 To Rewrite The Digital Rulebook