Wiertz Sebastien - Privacy by Sebastien Wiertz (CC BY 2.0) https://flic.kr/p/ahk6nh

Wiertz Sebastien - Privacy by Sebastien Wiertz (CC BY 2.0) https://flic.kr/p/ahk6nh

Privacy

chairs -office -empty -mall -life -dhaka -firmgate by nasir khan from Dhaka, Bangladesh, CC BY-SA 2.0 , via Wikimedia Commons

Canada’s Digital Super-Regulator: Bill C-36 Pushes Out the Privacy Commissioner and Hands Private Sector Privacy to an Overloaded Commission

In the last act of an incredibly intense digital policy stretch, the government today tabled new private sector privacy legislation in the form of Bill C-36, the Protecting Privacy and Consumer Data Act. It is a big bill, and my initial take will be divided into two: this post will focus on the seismic shift the bill creates for privacy administration and enforcement, and a second post (hopefully tomorrow) will discuss the substantive changes and additions. I start with the enforcement side because the most consequential feature of C-36 is the question of who will administer the rules. The bill firmly cements the Digital Safety Commission as a new digital super-regulator in Canada, stripping the Privacy Commissioner of authority over private sector privacy law and handing it instead to the same five-member commission the government created a few days ago to police online harms. I believe the approach is unprecedented among peer countries and will have negative repercussions for Canada’s standing in the privacy world. Indeed, removing an Agent of Parliament from private-sector privacy enforcement after decades isn’t something you tuck into a lengthy bill, but rather requires extended public consultation and analysis on how best to ensure Canada has effective privacy enforcement. This is a stunning abrogation of good policy development and a poorly conceived vision of the breadth and importance of privacy.

Read more ›

June 15, 2026 2 comments News
Privacy by Andrew Back CC BY-NC-SA 2.0 https://flic.kr/p/4KzgkH

Privacy as a Fundamental Right? The Government’s Terrible Privacy Track Record Suggests Virtue Signalling Over a Genuine Commitment

The government is set to introduce its long-promised privacy reform legislation early this week, with the recognition of a fundamental right to privacy expected to serve as a foundational element of the bill. Establishing privacy as a fundamental right would be a welcome and long-overdue development, one that many have called for and that was set to be added to Bill C-27, the prior attempt at privacy reform. Yet the framing is difficult to square with the government’s actual record on privacy, which over the past year has involved a steady stream of privacy-invasive measures that leave the fundamental rights rhetoric feeling more like virtue signalling than a genuine commitment. Simply put, the government cannot credibly claim to treat privacy as a fundamental right while actively undermining that right through a series of other bills and efforts to sideline the Privacy Commissioner of Canada.

Read more ›

June 14, 2026 3 comments News
Law to Be Named Later, Exemption Illusion

Taking Stock of Bill C-34: Five Things to Know About the Government’s Plan for a Kids’ Social Media Ban, Mandated Age Verification, and AI Chatbot Rules

This past week in digital policy was dominated by Bill C-34, the Safe Social Media Act, which includes platform regulation, an under-16 social media ban backed by mandated age verification, a new AI chatbot regulatory regime, and the creation of a powerful Digital Safety Commission. I have posted daily on the bill, including my initial review, an examination of the 50 key decisions the bill leaves for later, and a closer look at the government’s fast-track implementation plan, alongside a FAQ and posts on mandated ID and trade risks that I published just before the bill was tabled. For those coming to the issue fresh, this post draws on the week’s posts by taking stock of where things stand.

Read more ›

June 13, 2026 3 comments News
Sima Acan by BooBoo2517, CC BY-SA 4.0 , via Wikimedia Commons

Liberal MP: Lawful Access “Has Nothing to Do With the Privacy of People and Their Information”

The government is set to introduce privacy reform next week with the “fundamental right to privacy” expected to serve as a foundational element of the forthcoming bill. Yet as the Standing Committee on Public Safety and National Security continues its clause-by-clause review of Bill C-22, Liberal MP Sima Acan last night offered a stunning perspective suggesting that the government simply does not conceive of privacy as most Canadians do. Frustrated with the dogged efforts of Conservative MP Jacob Mantle to address the privacy implications of the bill, Acan stated that the bill “has nothing to do with the privacy of people and their information.” After multiple hearings on the privacy consequences of mandatory metadata retention, backdoor access and weakened encryption, and reduced evidentiary standards for access to subscriber information, the comment is ill-informed and simply shocking. If that position reflects the broader view within the government, it is little wonder that the privacy risks of lawful access have not been taken seriously.

Read more ›

June 12, 2026 2 comments News