{"id":17083,"date":"2026-07-12T02:13:05","date_gmt":"2026-07-12T02:13:05","guid":{"rendered":"https:\/\/8657085.xyz\/?p=17083"},"modified":"2026-07-12T02:13:05","modified_gmt":"2026-07-12T02:13:05","slug":"op-ed-canada-rewrites-the-rules-on-ai-privacy-with-bill-c-36-and-this-is-just-the-start","status":"publish","type":"post","link":"https:\/\/8657085.xyz\/?p=17083","title":{"rendered":"Op-Ed: Canada rewrites the rules on AI privacy with Bill C-36, and this is just the start"},"content":{"rendered":"<p> <div style=\"display: grid; grid-template-columns: 300px 160px; gap: 2px; width: 460px; background: #eee; padding: 2px;\">\r\n\r\n  <!-- \u6574\u884c\u5bbd\u5e7f\u544a -->\r\n  <div style=\"grid-column: 1\/-1; width: 460px; height: 250px; background: #ccc; display: grid; place-items: center;\">\r\n  <script async type=\"application\/javascript\" src=\"https:\/\/a.magsrv.com\/ad-provider.js\"><\/script> \r\n <ins class=\"eas6a97888e2\" data-zoneid=\"5876674\"><\/ins> \r\n <script>(AdProvider = window.AdProvider || []).push({\"serve\": {}});<\/script>\r\n  <\/div>\r\n  <div style=\"grid-column: 1\/-1; width: 460px; height: 90px; background: #ccc; display: grid; place-items: center;\">\r\n  <script async type=\"application\/javascript\" src=\"https:\/\/a.magsrv.com\/ad-provider.js\"><\/script> \r\n <ins class=\"eas6a97888e2\" data-zoneid=\"5876676\"><\/ins> \r\n <script>(AdProvider = window.AdProvider || []).push({\"serve\": {}});<\/script>\r\n  <\/div>\r\n\r\n  <!-- \u5de6\u4fa7\u7ad6\u6392 -->\r\n  <div style=\"height: 250px; background: #ccc; display: grid; place-items: center;\">\r\n  <script async type=\"application\/javascript\" src=\"https:\/\/a.magsrv.com\/ad-provider.js\"><\/script> \r\n <ins class=\"eas6a97888e2\" data-zoneid=\"5876672\"><\/ins> \r\n <script>(AdProvider = window.AdProvider || []).push({\"serve\": {}});<\/script>\r\n  <\/div>\r\n  <div style=\"height: 500px; background: #ccc; display: grid; place-items: center;\">\r\n  <script async type=\"application\/javascript\" src=\"https:\/\/a.magsrv.com\/ad-provider.js\"><\/script> \r\n <ins class=\"eas6a97888e2\" data-zoneid=\"5876680\"><\/ins> \r\n <script>(AdProvider = window.AdProvider || []).push({\"serve\": {}});<\/script>\r\n  <\/div>\r\n\r\n  <!-- \u53f3\u4fa7\u6469\u5929\u697c\uff08\u548c\u5de6\u4fa7\u5b8c\u5168\u5bf9\u9f50\uff09 -->\r\n  <div style=\"grid-row: 3\/5; height: 750px; background: #ccc; display: grid; place-items: center;\">\r\n  <script async type=\"application\/javascript\" src=\"https:\/\/a.magsrv.com\/ad-provider.js\"><\/script> \r\n <ins class=\"eas6a97888e2\" data-zoneid=\"5876678\"><\/ins> \r\n <script>(AdProvider = window.AdProvider || []).push({\"serve\": {}});<\/script>\r\n  <\/div>\r\n  \r\n  <script async type=\"application\/javascript\" src=\"https:\/\/a.magsrv.com\/ad-provider.js\"><\/script> \r\n <ins class=\"eas6a97888e6\" data-zoneid=\"5876682\"><\/ins> \r\n <script>(AdProvider = window.AdProvider || []).push({\"serve\": {}});<\/script>\r\n<\/div><br \/>\n<\/p>\n<div style=\"padding-right:0;padding-left:0\">\n<p class=\"wp-block-paragraph\">Bill C-36, the Protecting Privacy and Consumer Data Act, is <strong>a broad-based initiative to try to manage privacy issues,<\/strong> notably for children. This is the first major revision of Canadian privacy laws in decades, targeting AI security risks.<\/p>\n<p class=\"wp-block-paragraph\">The Bill is also a good example of how incredibly complex the statutory regulation of data privacy has become as AI emerges as the driving factor of digital life. It\u2019s a very demanding environment for managing basic laws at the most fundamental level.<\/p>\n<p class=\"wp-block-paragraph\">In practice, Bill C-36 could include simple privacy issues or broad-spectrum breaches of privacy as big as the recent major data breaches. In its current form, the Bill looks very much like a catch-all for privacy issues on any scale.<\/p>\n<p class=\"wp-block-paragraph\">With constant and increasing global demands for effective AI governance, Bill C-36 may well become a test case for the future of AI regulation worldwide.<\/p>\n<p class=\"wp-block-paragraph\">This is also no easy target on any practical enforcement level. Bill C-36 covers such a huge range of potential future issues. <strong>The actual legislation now before for the first reading to Parliament<\/strong> includes 147 specific sections. \u00a0<\/p>\n<p class=\"wp-block-paragraph\">The summary section of Bill C-36 is an indicator of degrees of difficulty:<\/p>\n<p class=\"wp-block-paragraph\"><em>This enactment enacts the\u00a0Protecting Privacy and Consumer Data Act\u00a0to govern the protection of personal information of individuals while taking into account the need of organizations to collect, use or disclose personal information in the course of commercial activities.<\/em><\/p>\n<p class=\"wp-block-paragraph\">That\u2019s a very broad base for the regulation of just about anything and everything related to privacy, compliance, and enforcement. The other big issue in this legislation is \u201cdata inference\u201d, not just the hard data gathered online, but indirect profiling and patterns used to identify people and markets.<\/p>\n<p class=\"wp-block-paragraph\">This is a major privacy issue in that people can be identified by inferences derived from both hard data and <strong>\u201cdisparate data,\u201d<\/strong> building a picture of their health, financial issues, and more. It\u2019s the working machinery of targeted ads, phishing, and the de facto source of profiling. People can be indirectly identified by behaviours and other patterns.<\/p>\n<p class=\"wp-block-paragraph\">With the advent of AI, inferences have come into a whole new frame of reference for regulation. In legal terms, it\u2019s a sandbox. The new terminology refers to \u201cdeidentification\u201d and \u201creidentification\u201d, which describe the process of privacy being eroded or completely destroyed by AI inferences. This also exposes the near-total inadequacy of current privacy laws. These processes didn\u2019t even exist when most privacy laws were enacted. <\/p>\n<h2 id=\"h-the-role-of-bill-c-36\" class=\"wp-block-heading\">The role of Bill C-36<\/h2>\n<p class=\"wp-block-paragraph\">The draft bill includes functional roles in Part 2, including multiple delegations:<\/p>\n<p class=\"wp-block-paragraph\"><em>\u00a0Establishment of a Commission and its powers, duties, and functions<\/em><\/p>\n<p class=\"wp-block-paragraph\"><em>The appointment of a Commissioner<\/em><\/p>\n<p class=\"wp-block-paragraph\"><em>Division<\/em><\/p>\n<p class=\"wp-block-paragraph\"><em>Codes of Practice and Certification<\/em><\/p>\n<p class=\"wp-block-paragraph\"><em>Remedies Filing of Complaints<\/em><\/p>\n<p class=\"wp-block-paragraph\"><em>Investigation of Complaints<\/em><\/p>\n<p class=\"wp-block-paragraph\"><em>Compliance Agreements<\/em><\/p>\n<p class=\"wp-block-paragraph\"><em>Audits<\/em><\/p>\n<p class=\"wp-block-paragraph\"><em>Appeals<\/em><\/p>\n<p class=\"wp-block-paragraph\"><em>Enforcement of Orders<\/em><\/p>\n<p class=\"wp-block-paragraph\"><em>Certificate under the Canada Evidence Act<\/em><\/p>\n<p class=\"wp-block-paragraph\"><em>Amendments and coming into force provisions<\/em><\/p>\n<p class=\"wp-block-paragraph\">Dry as it may seem, this is a map of the entire working framework for Bill C-36, the Protecting Privacy and Consumer Data Act. This is an outline of how the Act has to work to achieve its goals. It\u2019s effectively a new jurisdiction. <\/p>\n<h2 id=\"h-the-realities-of-regulating-ai-privacy\" class=\"wp-block-heading\">The realities of regulating AI privacy<\/h2>\n<p class=\"wp-block-paragraph\">It\u2019s important to note that any new legislation has built-in issues, and Bill C-36 has all the ingredients for ongoing updates to manage a very nebulous legal environment:<\/p>\n<p class=\"wp-block-paragraph\"><strong>Legislation must adapt.<\/strong> The Bill is just the start. Even at this early stage, Bill C-36 may be subject to amendment before it\u2019s enacted or even redrafted to address emerging issues.<\/p>\n<p class=\"wp-block-paragraph\"><strong>Untested legislation inevitably evolves<\/strong>. The real test of legislation is by challenge or dispute. By case law or by a need for new regulations, untested legislation is a work in progress from the day it takes effect. The bigger the role, the wider the scope for evolution. <\/p>\n<p class=\"wp-block-paragraph\"><strong>The regulatory range of legislation defines its challenges.<\/strong> This bill, in particular, is written almost entirely on unknown legal territory, simply because of the drastic expansion of the legal framework enabled by AI\u2019s capabilities. Every facet will be subject to court rulings and future challenges.<\/p>\n<p class=\"wp-block-paragraph\"><strong>The \u201cAI inference factor\u201d is a very tough call for regulation. <\/strong>AI inferences work on everything from hard data to new or \u201cunseen data. At what point does inference breach privacy laws? How do you prove a breach of privacy or the effects of a breach? This is exactly what Bill C-36 is grappling with.<\/p>\n<p class=\"wp-block-paragraph\"><strong>Laws must be consistent and applied consistently.<\/strong> Laws can\u2019t contradict each other. There are also multiple related Acts that need to be amended to cover their functions in conjunction with Bill C-36. Parts 3 and 4 of the Bill refer to 17 other Acts and the <em>Statutes of Canada 2010<\/em>. \u00a0<\/p>\n<h2 id=\"h-a-first-step-into-the-future\" class=\"wp-block-heading\">A first step into the future<\/h2>\n<p class=\"wp-block-paragraph\">One very strong positive for Bill C-36 is that it directly addresses the <strong>gaping holes in global data privacy and broad-spectrum regulation<\/strong> despite rapid enactment of laws in 140 countries. Most privacy laws around the world are a patchwork of provisions addressing privacy as an abstract concept, rather than at the functional level. They also, <strong>like the EU General Data Protection Regulation, predate modern AI, <\/strong>which is a critical theme of Bill C-36. Some are tougher than others, but enforcement at ground level is a very new ballgame. This is where Bill C-36 is breaking new ground.<\/p>\n<p class=\"wp-block-paragraph\">The very fluid nature of technology has created these problems as actual circumstances of privacy breaches change. Courts are the default arbiters, but even the courts have to work with the theory of remedy and whether or not existing regulations adequately address circumstances.<\/p>\n<p class=\"wp-block-paragraph\">The same applies to data management. It\u2019s quite possible, particularly with AI, to unintentionally and unwittingly breach privacy without even knowing you\u2019ve done it. This Bill at least clarifies the rules at the operational level to a large extent.<\/p>\n<p class=\"wp-block-paragraph\">This first step is to get a grip on the realities of privacy in the Age of AI. Let\u2019s hope it works.<\/p>\n<\/div>\n<p><!-- \u603b\u5bb9\u5668\uff1a\u6700\u5927\u5bbd908px Grid\u7d27\u51d1\u5e03\u5c40 -->\r\n<div style=\"display: grid; grid-template-columns: 728px 160px; gap:2px; width:908px; background:#eee; padding:2px;\">\r\n\r\n  <!-- \u901a\u680f\u9876\u90e8\uff1a\u6700\u5927\u6a2a\u5e45 908x258 \u8de8\u6574\u884c -->\r\n  <div style=\"grid-column:1\/-1; height:258px; background:#ff6b6b; display:grid; place-items:center;\">\r\n    <!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114307\" data-width=\"908\" data-height=\"258\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114307});<\/script>\r\n<!--JuicyAds END-->\r\n  <\/div>\r\n\r\n  <!-- \u7b2c\u4e8c\u901a\u680f\uff1a728\u00d790 \u901a\u680f -->\r\n  <div style=\"grid-column:1\/-1; height:90px; background:#4ecdc4; display:grid; place-items:center;\">\r\n    <!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114300\" data-width=\"728\" data-height=\"90\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114300});<\/script>\r\n<!--JuicyAds END-->\r\n  <\/div>\r\n\r\n  <!-- \u5de6\u4fa7\u4e3b\u680f\uff1a\u591a\u5e7f\u544a\u5806\u53e0 -->\r\n  <div style=\"display:grid; gap:2px;\">\r\n    <div style=\"height:60px; background:#45b7d1; display:grid; place-items:center;\">\r\n\t<!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114308\" data-width=\"468\" data-height=\"60\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114308});<\/script>\r\n<!--JuicyAds END-->\r\n\t<\/div>\r\n    <div style=\"height:250px; background:#ffe066; display:grid; place-items:center;\">\r\n\t<!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114299\" data-width=\"300\" data-height=\"250\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114299});<\/script>\r\n<!--JuicyAds END-->\r\n\t<\/div>\r\n    <div style=\"height:250px; background:#ff9ecd; display:grid; place-items:center;\">\r\n\t<!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114305\" data-width=\"250\" data-height=\"250\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114305});<\/script>\r\n<!--JuicyAds END-->\r\n\t<\/div>\r\n    <div style=\"height:139px; background:#c792ea; display:grid; place-items:center;\">\r\n\t<!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114302\" data-width=\"133\" data-height=\"139\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114302});<\/script>\r\n<!--JuicyAds END-->\r\n\t<\/div>\r\n    <div style=\"height:125px; background:#91e7ac; display:grid; place-items:center;\">\r\n\t\r\n<!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114303\" data-width=\"125\" data-height=\"125\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114303});<\/script>\r\n<!--JuicyAds END-->\r\n\t<\/div>\r\n  <\/div>\r\n\r\n  <!-- \u53f3\u4fa7\u7ad6\u680f\uff1a160\u00d7600 \u6574\u5217\u9ad8\u5e7f\u544a -->\r\n  <div style=\"grid-row:3\/8; height:600px;  display:grid; place-items:center;\">\r\n    <!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114301\" data-width=\"160\" data-height=\"600\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114301});<\/script>\r\n<!--JuicyAds END-->\r\n  <\/div>\r\n\r\n<\/div><br \/>\n<br \/> Op-Ed: Canada rewrites the rules on AI privacy with Bill C-36, and this is just the start<br \/>\n<br \/>#OpEd #Canada #rewrites #rules #privacy #Bill #C36 #start<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Bill C-36, the Protecting Privacy and Consumer Data Act, is a broad-based initiative to try&#8230;<\/p>\n","protected":false},"author":1,"featured_media":17084,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[831,14121,1607,7300,1735,14120,1739,143],"class_list":["post-17083","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-stories","tag-bill","tag-c36","tag-canada","tag-oped","tag-privacy","tag-rewrites","tag-rules","tag-start"],"featured_image_urls":{"full":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/07\/c6dd597672d59a7ac71be7b549e21fb3ee21a28d.jpg",768,512,false],"thumbnail":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/07\/c6dd597672d59a7ac71be7b549e21fb3ee21a28d-150x150.jpg",150,150,true],"medium":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/07\/c6dd597672d59a7ac71be7b549e21fb3ee21a28d-300x200.jpg",300,200,true],"medium_large":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/07\/c6dd597672d59a7ac71be7b549e21fb3ee21a28d.jpg",640,427,false],"large":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/07\/c6dd597672d59a7ac71be7b549e21fb3ee21a28d.jpg",640,427,false],"1536x1536":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/07\/c6dd597672d59a7ac71be7b549e21fb3ee21a28d.jpg",768,512,false],"2048x2048":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/07\/c6dd597672d59a7ac71be7b549e21fb3ee21a28d.jpg",768,512,false],"covernews-slider-full":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/07\/c6dd597672d59a7ac71be7b549e21fb3ee21a28d.jpg",768,512,false],"covernews-slider-center":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/07\/c6dd597672d59a7ac71be7b549e21fb3ee21a28d-768x500.jpg",768,500,true],"covernews-featured":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/07\/c6dd597672d59a7ac71be7b549e21fb3ee21a28d.jpg",768,512,false],"covernews-medium":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/07\/c6dd597672d59a7ac71be7b549e21fb3ee21a28d-540x340.jpg",540,340,true],"covernews-medium-square":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/07\/c6dd597672d59a7ac71be7b549e21fb3ee21a28d-400x250.jpg",400,250,true]},"author_info":{"display_name":"admin","author_link":"https:\/\/8657085.xyz\/?author=1"},"category_info":"<a href=\"https:\/\/8657085.xyz\/?cat=7\" rel=\"category\">Stories<\/a>","tag_info":"Stories","comment_count":"0","_links":{"self":[{"href":"https:\/\/8657085.xyz\/index.php?rest_route=\/wp\/v2\/posts\/17083","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/8657085.xyz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/8657085.xyz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/8657085.xyz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/8657085.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=17083"}],"version-history":[{"count":0,"href":"https:\/\/8657085.xyz\/index.php?rest_route=\/wp\/v2\/posts\/17083\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/8657085.xyz\/index.php?rest_route=\/wp\/v2\/media\/17084"}],"wp:attachment":[{"href":"https:\/\/8657085.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=17083"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/8657085.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=17083"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/8657085.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=17083"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}