Canada introduces Bill C-36 to strengthen AI privacy protections

Ottawa has introduced a revised privacy framework that expands protections for minors under the Digital Charter Implementation Act, commonly referred to as Bill C‑27. The legislation tightens consent requirements by mandating parental approval for the collection, use and disclosure of personal information belonging to children under 13, and it obliges organizations to adopt age‑appropriate privacy notices and to limit data retention periods for young users. The government presented the measures as a response to growing concerns about the digital exposure of children and positioned the bill as a modernization of the country’s long‑standing Personal Information Protection and Electronic Documents Act (PIPEDA).

Privacy scholars and technology watchdogs, however, caution that the bill does not fully address emerging risks associated with artificial‑intelligence systems. Critics note that the legislation lacks explicit safeguards against AI‑driven profiling, automated decision‑making and the generation of synthetic content that could exploit or manipulate minors. While the new rules mark a step toward stronger child privacy standards, experts argue that additional regulatory provisions will be needed to mitigate the broader spectrum of AI‑related threats in Canada’s digital environment.