Canada. Comprehensive data protection. Bill

Bill C-27Bill C-27, Digital Charter Implementation Act, 2022 (CPPA, PIDPTA, AIDA)

Repealed/superseded

§1Summary

Synopsis

Proposed to replace PIPEDA's privacy part with a Consumer Privacy Protection Act, create a privacy tribunal and enact the Artificial Intelligence and Data Act. It lapsed without enactment.

Key themes
  • CPPA
  • tribunal
  • AI regulation (AIDA)
  • de-identification
  • minors' data
Unique features

Would have introduced Canada's first federal AI statute; AIDA was not carried forward into the successor bill.

SaaS relevance

No current legal effect; useful only as background to Bill C-36.

§2Obligations

Maximum penalty
Proposed: greater of CAD 25m or 5% global revenue

§3Dates

Key dates
  • Adopted
  • Ended
  • Introduced 2022-06-16; died on the order paper when Parliament was prorogued 2025-01-06; replaced in substance by Bill C-36 (2026)

§4Text and authority

Text
Authority
Would have been OPC + Personal Information and Data Protection Tribunal

§5Where it applies

Domestic law of
Canada
Also applies in

§6Sources and verification

Verification

High confidence.

Status uses 'Repealed/superseded' to signal a lapsed bill.