From the journal

Manitoba Enacts Algorithmic Pricing Consent Rule and Public-Sector AI Governance Act, 1 June 2026

On 1 June 2026, the Manitoba Legislature granted Royal Assent to Bill 49 and Bill 51. Bill 49 amends the Business Practices Act to prohibit personalized algorithmic pricing without consumer consent. Bill 51 enacts the Public Sector Artificial Intelligence and Cybersecurity Governance Act, requiring government bodies, health authorities, universities, school divisions, and municipalities to publish AI accountability plans.

2 min read

On 1 June 2026, Manitoba granted Royal Assent to Bill 49 and Bill 51. Bill 49 amends The Business Practices Act to prohibit personalized algorithmic pricing for Manitoba consumers without their prior consent. Bill 51 enacts the Public Sector Artificial Intelligence and Cybersecurity Governance Act. Both statutes are now in force in Manitoba.

Bill 49 amends The Business Practices Act by defining personalized algorithmic pricing and prohibiting its use without consumer consent. The definition covers any price set, recommended, or varied for a specific consumer through an algorithm. The algorithm must draw on data including browsing history, spending patterns, device profiles, inferred willingness to pay, income level, credit history, location, or medical history. Using personalized algorithmic pricing without consent constitutes an unfair business practice, enforceable by the Consumer Protection Office. Bill 51 requires covered public sector entities to publish AI accountability and risk management plans, document AI systems in use, and refrain from uses prohibited by future regulation.

Retailers, insurers, financial institutions, and online platforms serving Manitoba consumers must audit their pricing algorithms against Bill 49's consent standard. Any algorithm that personalizes a price to an individual using the enumerated data categories requires an opt-in consent mechanism. For Bill 51, government agencies, regional health authorities, universities, school divisions, and municipalities must appoint accountability owners and document AI systems in use. They must also publish governance documentation before deploying AI in public services.

Bill 49's consent requirement applies to personalized pricing but not to general dynamic pricing, promotional pricing, or loyalty programme pricing that is not individualized to a specific consumer's profile. Bill 51's prohibited AI uses will be defined by future regulation; those regulations have not yet been published. Transition timelines for both Acts will be set by proclamation.

Licentium advises businesses and public sector bodies on Canadian AI and consumer protection regulation. Our work covers algorithmic pricing compliance audits, consent mechanism design, and AI governance programme development for public institutions; contact us to discuss your requirements. Work we undertake includes AI risk assessments, governance programme implementation, cross-provincial regulatory mapping, and data protection compliance.

Source: Mondaq / Torys LLP, Manitoba Introduces Algorithmic Pricing and Public Sector AI Regulation, June 2026

AI Regulatory

More from the journal

See all
Illia Prokopiev

From Cloud Concentration to AI Dependence: The UK’s Critical Third Parties Regime

The United Kingdom now directly oversees designated technology suppliers whose service failures could threaten financial stability. The question is whether the first cloud designations show a legal expansion toward AI-model providers, and what the present regime requires. This analysis assumes the quoted statement concerns the UK financial-services Critical Third Parties regime and assesses the law through 14 July 2026.

Alberta Regulated iGaming Market Launched on 13 July 2026 with 22 Operators

Alberta's regulated private iGaming market launched on 13 July 2026, making Alberta the second Canadian province to permit private online gambling operators after Ontario. The Alberta Gaming, Liquor and Cannabis Commission serves as market regulator and the Alberta iGaming Corporation oversees commercial operations and operator contracts. Twenty-two operator sites went live on day one, including FanDuel, DraftKings, BetMGM, and BetRivers. Operators must fully launch or exit the Alberta market by 13 October 2026.

European Commission Presents Cybersecurity and AI Action Plan on 7 July 2026

On 7 July 2026, the European Commission presented an Action Plan on Cybersecurity and Artificial Intelligence. The plan directs the Commission and ENISA to evaluate advanced AI models before they reach the EU market, establish a secure testing platform for critical-sector organisations, and launch an EU Grand Challenge on AI-powered cybersecurity solutions. It operates alongside the AI Act, NIS2 Directive, DORA, Cyber Resilience Act, and Cyber Solidarity Act, and introduces no new directly binding obligations.