The introduction of a new bill by the Canadian government indicates a significant overhaul of the country's privacy laws. Businesses in Canada are obligated to report data breaches affecting customers' personal information. All regulated Canadian businesses in the country's key industries—including banking, insurance, healthcare, and transportation—must abide by the Act's regulations or guiding principles. You may learn more about the new laws under the Canada Digital Privacy Act in this pdf.

1. What are the new laws under Canada digital privacy act?
To provide all Canadians with adequate protection for their digital privacy, the Canada Digital
Privacy Act was drafted.
Following are the new laws under Canada’s digital privacy act:
1. Consumer Privacy Protection Act (CPPA): This act is described as “An act to promote and support
electronic commerce wherein the personal information that is collected, used or disclosed is
protected in the course of commercial activities. Rules are established so that the protection of
personal information can be governed in a manner that balances the right to privacy of individuals.

2. Following are some of the important characteristics of CPPA:
 Transparency and control are increased when the organization handles Canadians’ personal
information
 Providing freedom to citizens so that their information can be moved from one organization
to another in a secure manner
 Broad order-making powers should be provided to the privacy commissioner of Canada,
including the power to stop the company from using personal information or collecting data.
2. Artificial Intelligence and Data Act: New rules are introduced in this act so that government
approval can be strengthened in the development and deployment of AI systems. Interprovincial
and International trade and commerce are regulated in Artificial Intelligence systems by instituting
common requirements that are applicable across Canada for the development, design, and use of
these systems.
Any conduct that is related to artificial intelligence systems is prohibited that may harm the citizen’s
interests. One of the key aspects of the AI and Data act is that the personal data scrutinized by AI
programs need to be permanently anonymised and encrypted so that there is no way that can be
established to connect the data findings with the owners.
3. Personal Information and Data Protection Tribunal Act: This Act plays a strategic role in the
enforcement of the Consumer Privacy Protection Act. The recommendations by the Privacy
Commissioner of Canada are reviewed so that administrative monetary penalties can be imposed for
certain contraventions of the Act.
This act is supposed to be a mechanism that is accessible for both individuals and organizations to
seek a review of Privacy Commissioner decisions. It must also be noted that to govern personal
information by this act is already listed on the internet under the current PIPED Act.