On 10 June 2026, Evan Solomon, Minister of Artificial Intelligence and Digital Innovation, tabled Bill C-36 in the House of Commons. The bill is at first reading and has not received Royal Assent. Bill C-36 enacts the Protecting Privacy and Consumer Data Act (PPCDA), which will replace the private-sector provisions of the Personal Information Protection and Electronic Documents Act (PIPEDA), in force since 2001.
The PPCDA introduces three categories of obligation. First, organizations must obtain meaningful consent using plain-language explanations of their personal data handling practices. Second, organizations using automated decision-making systems for decisions that significantly affect individuals must disclose that use and, on request, explain the logic applied. Third, the bill restricts collection and use of personal information from minors. The Office of the Privacy Commissioner gains expanded powers to investigate, issue binding orders, and impose administrative monetary penalties.
Technology companies, financial institutions, insurance providers, and telecoms collecting personal information of Canadian residents must assess their consent practices against the PPCDA requirements. Firms running AI-driven onboarding, credit decisioning, or risk-scoring systems must document their automated logic. They must also create disclosure mechanisms for individuals subject to those decisions. Cross-border data transfers remain subject to accountability obligations, bringing international platforms operating in Canada within the bill's reach.
Bill C-36 has not passed. It must clear committee review, Senate consideration, and potential amendment before receiving Royal Assent. The commencement date and any transition period will be set by Order-in-Council after Royal Assent. PIPEDA continues to govern private-sector privacy until the PPCDA comes into force. The Privacy Commissioner issued a statement on 15 June 2026 endorsing the bill while calling for stronger enforcement powers.
Licentium advises technology companies, financial institutions, and AI developers on Canadian privacy law. We assist with gap analyses against PPCDA requirements, consent mechanism design, and automated decision-making disclosure obligations; contact us to discuss how the bill affects your operations. Work we undertake includes privacy programme development, AI transparency reviews, cross-border data transfer assessments, and engagement with the Office of the Privacy Commissioner.