A quarter century after the Personal Information Protection and Electronic Documents Act (PIPEDA) reshaped Canada’s privacy landscape, Ottawa is proposing a sweeping overhaul.
On June 15, 2026, the federal government introduced Bill C-36, legislation that would replace the private-sector privacy framework established under PIPEDA with a new regime: the Protecting Privacy and Consumer Data Act (PPCDA).
In Part II of this two-part podcast series, we examine the practical implications of the proposed PPCDA, including enhanced consent requirements, greater transparency around automated decision-making, expanded rights to data deletion and mobility, and a new framework for de-identified and anonymized information.
We also explore heightened expectations surrounding cross-border data transfers, third-party service provider oversight, privacy management programs, and security safeguards—and what these changes could mean for organizations as they prepare for a new era of privacy regulation in Canada.
