Canada Introduces New Federal Privacy Bill
The DCIA is aligned closely with the EU’s GDPR and remains focused on PIPEDA and its 10 privacy principles. DCIA provides individuals with more control over how their personal information is collected, used and disclosed by businesses for commercial/marketing purposes.
CPPA has suggested several important changes to Canada’s existing privacy laws. Here are a few highlights of the proposed law:
- A privacy management program provided to the Office of the Privacy
- Commissioner on demand
- Fines of up to 5% or $25 million
- Private right of action
- A comprehensive standard for appropriate processing of personal information
- Defines activities for processing personal information without consent
- Defines when transfers to service providers does not require knowledge and consent
- Defines circumstances in which de-identified information can be processed
- Requires an explanation of the logic behind automated decision-making about a person
- Requires disclosure of how the personal information used to make predictions, recommendations or decision was obtained
- Expands consumer rights to include portability and deletion
- Creates codes of practice and certification programs to facilitate compliance
We’ll continue to keep you updated on how this proposed law evolves over the coming months.
Suggested Blog Posts
On December 9, just one week after WireWheel’s SPOKES Privacy Technology Conference, where the concept of a U.S....
On December 10, 2020, the California Attorney General proposed new modifications to the CCPA. The proposed...
In the plenary session of WireWheel’s SPOKES Privacy Conference two central figures in crafting transatlantic data...
If your company is preparing for a liquidity event or doing the due diligence associated with acquiring a business,...
It seems like we’ve been talking about the CCPA for a very long time. The first proposed CCPA language came out in...