After a hiatus of almost two years, the Canadian Government has
finally recommenced its long awaited overhaul of existing federal
private sector privacy legislation. On June 16, 2022, Bill C-27,
An Act to enact the Consumer Privacy Protection Act, the
Personal Information and Data Protection Tribunal Act and the
Artificial Intelligence and Data Act and to make consequential and
related amendments to other Acts known as the Digital
Charter Implementation Act, 2022 ("Bill
C-27") received its first reading in Parliament. The
Artificial Intelligence and Data Act is not covered in
this article and will be summarized separately.
Similar to its predecessor privacy reform bill, Bill
C-11,1 Bill C-27 introduces bold new measures into
Canada's privacy law that will significantly impact Canadian
businesses: Canadian businesses will be required to invest in the
protection of personal information or face heavy administrative
monetary penalties for non-compliance. Furthermore,
