Canada: Privacy Protection

Bills C-34 and C-36 represent a significant modernization of Canada’s regulation of the internet and AI, with notable impacts on U.S. companies.

Ontario and Alberta have launched regulated iGaming markets built on hybrid public-private privacy frameworks that blend private-sector principles with government control structures. Operators must navigate complex data governance requirements, including public-sector access obligations, AI deployment constraints, and cross-border processing approvals that go far beyond traditional commercial privacy compliance.

Canada's proposed federal privacy reform would integrate privacy oversight into a broader online harms prevention mandate through a new Digital Safety and Data Protection Commission. This consolidated regulator would wield expanded enforcement powers, including binding orders and substantial fines, while overseeing both privacy protection and digital safety legislation.

On June 15, 2026, the federal government introduced Bill C-36, An Act to enact the Protecting Privacy and Consumer Data Act (PPCDA). If enacted, this long‑awaited legislation would mark the most significant reform of Canada's federal private-sector privacy regime in more than two decades.

This is a monthly bulletin published by the Privacy and Cybersecurity Group at Fasken with noteworthy news and updates. If you have any questions about the items in this bulletin, please contact any member of the Privacy and Cybersecurity Group and we will be pleased to assist.

Ce bulletin mensuel a été préparé par le groupe Protection des renseignements confidentiels, vie privée et cybersécurité de Fasken pour vous présenter les actualités et les développements récents qui ont attiré notre attention. Si vous avez des questions sur l’un des sujets abordés dans ce bulletin, veuillez communiquer avec l’un des membres de ce groupe, qui se fera un plaisir de vous aider.

Bill C-36 introduces the Protecting Privacy and Consumer Data Act to replace PIPEDA provisions, creating a new Digital Safety and Data Protection Commission with strong enforcement powers and imposing new consent requirements and compliance obligations on organizations.

On June 10, 2026, the Government of Canada introduced Bill C‑34, the Safe Social Media Act, proposing a new federal framework to regulate online harms. The bill proposes two new statutes, the Digital Safety Act and the Digital Safety Commission of Canada Act, as well as consequential amendments to other legislation.

The Canadian government has introduced Bill C-36, the Protecting Privacy and Consumer Data Act, representing a significant overhaul of federal private-sector privacy law. This comprehensive timeline tracks the bill's parliamentary journey from its June 2026 introduction through previous legislative attempts, while outlining critical next steps for stakeholders as Parliament prepares for summer adjournment. Understanding the bill's progression and upcoming consultation opportunities will be essential for bus