Canada Introduces New Federal Privacy Bill
The DCIA is aligned closely with the EU’s GDPR and remains focused on PIPEDA and its 10 privacy principles. DCIA provides individuals with more control over how their personal information is collected, used and disclosed by businesses for commercial/marketing purposes.
CPPA has suggested several important changes to Canada’s existing privacy laws. Here are a few highlights of the proposed law:
- A privacy management program provided to the Office of the Privacy
- Commissioner on demand
- Fines of up to 5% or $25 million
- Private right of action
- A comprehensive standard for appropriate processing of personal information
- Defines activities for processing personal information without consent
- Defines when transfers to service providers does not require knowledge and consent
- Defines circumstances in which de-identified information can be processed
- Requires an explanation of the logic behind automated decision-making about a person
- Requires disclosure of how the personal information used to make predictions, recommendations or decision was obtained
- Expands consumer rights to include portability and deletion
- Creates codes of practice and certification programs to facilitate compliance
We’ll continue to keep you updated on how this proposed law evolves over the coming months.
Suggested Blog Posts
Colorado Passes a Data Privacy Law Law would be effective on July 1, 2023Written by Rick Buck, Chief Privacy Officer,...
Today… and into the futureWritten by Rick Buck, Chief Privacy Officer, WireWheelAfter new privacy laws passed within...
Written by Guest blogger: David Stauss, partner at Husch Blackwell LLPWith the passage of the California Privacy...
Written by Rick Buck, Chief Privacy Officer, WireWheelCCPA, CDPA, GDPR Similarities and Differences Many new state...
WireWheel CEO Justin Antonipillai has talked with many data privacy industry leaders, analysts, and advocates who have...