Nov 20, 2020
On Tuesday November 17, 2020 the Federal government released a Bill proposing significant changes to the national framework for the protection of personal information in Canada.
The long-awaited and much-anticipated Bill, entitled the Digital Charter Implementation Act, 2020 (DCIA), was tabled by the Minister of Innovation, Science, and Industry in Parliament. If passed, the Bill would establish a new private sector privacy law in Canada, the Consumer Privacy Protection Act (CPPA), and a new Personal Information and Data Protection Tribunal.
Based on the Government of Canada’s Fact Sheet, key changes to the federal privacy legislative framework will include the following:
- Administrative monetary penalties of up to 3% of global revenue or $10 million CAD for non-compliant organizations.
- Expanded range of offences for certain serious contraventions of the law, subject to a maximum fine of 5% of global revenue or $25 million CAD.
- Establishing a Personal Information and Data Protection Tribunal.
- Providing the Privacy Commissioner of Canada with broad order-making powers.
- Enabling organizations to request the Privacy Commissioner to approve codes of practice and certification systems that set out rules for how the CPPA could apply to certain activities, sectors or business models, and demonstrating compliance.
- Simplifying consent by removing the burden of having to obtain consent when that consent does not provide any meaningful privacy protection.
- Allowing individuals to request disposal of their personal information and permit individuals to withdraw consent to the use of their information.
- Introducing new algorithmic transparency provisions that would provide individuals the right to request that businesses explain how a prediction, recommendation or decision was made by an automated decision-making system and explain how the information was obtained.
- Granting individuals data mobility rights by allowing them to direct the transfer of their personal information from one organization to another.
- Allowing de-identified information to be used without an individual's consent in certain circumstances. The legislation would also allow businesses to disclose de-identified data to public entities in certain circumstances for socially beneficial purposes (“data for good”).
In this webinar, Adam Kardash, Head of Osler’s Privacy and Data Management practice and National Lead, AccessPrivacy provides initial commentary and insights on the new proposed Bill.
Watch the on demand webinar
Osler’s Privacy and Data Management team is carefully considering the proposed new federal privacy rules and will be providing additional commentary as we continue to analyze the Bill and its potential impact.
For more information please contact Adam Kardash, John Salloum or Joanna Fine, and sign up for free AccessPrivacy newsletters.