Government of Canada introduces Protecting Privacy and Consumer Data Act
Sarah Dever Letson, CIPP/C, Maria Cummings, and Keeley A. Hussey
On June 15, 2026, Bill C-36, An Act to enact the Protecting Privacy and Consumer Data Act, to amend the Personal Information Protection and Electronic Documents Act and to make amendments to other Acts (the “Act“) was introduced at the House of Commons.
The Act represents the most significant potential reform to Canada’s private-sector privacy legislation in over 25 years.
Should it pass, it will come into force on a date yet to be fixed by the Governor in Council. We will provide further updates as details are confirmed.
Key changes
At a high level, Bill C-36 aims to modernize and strengthen Canada’s private-sector privacy law.
Among other things, Bill C-36 proposes to repeal Part I of PIPEDA and replace it with the “Protecting Privacy and Consumer Data Act” which will:
- recognize privacy as a “fundamental right,” with enhanced protections for children’s personal information;
- establish a new regulator, the Digital Safety and Data Protection Commission of Canada;
- authorize the regulator to impose significant administrative monetary penalties: up to the greater of $10 million or 3% of gross global revenue, and up to the greater of $25 million or 5% of gross global revenue for certain more serious offences, such as knowingly contravening breach notification requirements;
- allow for a private right of action permitting affected individuals to sue for damages once a contravention is established, subject to a two-year limitation period;
- create a right to request deletion or transfer to another designated organization of personal information in certain circumstances; and
- initiate new privacy impact assessment requirements for personal information transfers outside of Canada.
What to expect next
It is unclear at this time when the next stage of the legislative process will take place or when the act will be set to come into force. Of note, the House is set to adjourn for summer on June 19th, making it unlikely that any progress will be made before it reconvenes in September.
We are actively monitoring progress of Bill C-36 as well as any additional legislative reform proposed in furtherance of Canada’s privacy and AI strategy. In the meantime, if you have any questions about how the Act may affect your organization, please contact a member of our privacy law team.
This client update is provided for general information only and does not constitute legal advice. If you have any questions about the above, please contact the authors, or a member of our Privacy Group.
Click here to subscribe to Stewart McKelvey Thought Leadership.