Skip to main content
Parliament returns Wednesday, July 22
Back to Bills
C-36At second reading in the House of Commons

Bill C-36 — Canada's New Privacy Law: Protecting Your Data and Consumer Rights

New Law to Protect Your Data

Introduced Jun 15, 2026
Summary

This proposed law would create new, stronger rules for how businesses handle your personal information. It would affect almost all companies that collect, use, or share your data when they do business in Canada. The law would make companies more responsible for keeping your information safe and using it fairly. It would also change Canada's main privacy law to make it stronger. You would get new rights over your own data. For example, you could ask a company to move your personal information from one company to another. Companies would need clear permission to collect and use your data, especially for sensitive information or when dealing with children's data. A new group, called the Digital Safety and Data Protection Commission, would be created. This group would make sure companies follow these new rules. If companies break the rules, this new group could investigate, order changes, and give out big fines. This matters because it would give you more control over your digital life. It would help protect your privacy in a world where companies collect a lot of information about you. It would make sure businesses are more careful and open with your data. This would lead to greater trust and security for everyone online. It also means companies could face serious consequences if they misuse your personal information.

Bill Timeline
Introduced in the House
Jun 15, 2026
Where This Lands on Key Issues

Where this proposed law falls on the policy spectrums that Canadians care about

Set your 3 priorities to see how this bill aligns with what you care about.

Sign up free — 30 sec
Bill Quality
Solid

This proposed law aims to update Canada's privacy rules for the digital age, giving people more control over their personal information. It creates a new watchdog group with real power to make companies follow the rules and introduces new rights like moving your data between services. However, many important details are left to be decided later by government rules, which means we don't know the full impact yet.

Things to Watch For

  • Many important rules will be decided later through government regulations, so the full impact isn't clear yet.
  • The proposed law lists several situations where companies can use your data without your direct consent.
  • Small businesses might find it challenging to meet the new privacy requirements without specific support or exemptions.
  • It's unclear how quickly the new Digital Safety and Data Protection Commission will be able to resolve complaints and enforce the rules.
  • The definition of 'appropriate purposes' for data collection and use could be interpreted broadly by organizations.
Progress

Click any step to learn what it means

What Do You Think?

Loading...

Discussion

Sign in to join the discussion.

Loading comments...