Bill C-36
Protecting Privacy and Consumer Data Act (Bill C-36)
The federal bill that would replace the private-sector part of PIPEDA. It keeps the penalty caps proposed in C-27 (up to CAD 10m or 3% of global revenue, and fines up to CAD 25m or 5%) but drops the AI act and the tribunal. PIPEDA stays in force until it passes.
The Association's practitioner brief for this law is on the way; the priority laws come first.
Recent developments
Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.
Sources
- Bill status LEGISinfo · Official text or regulator
- Analysis DLA Piper · Legal publisher or association
- Analysis Osler · Legal publisher or association
Dates and status checked against these sources on 18 October 2026. This page explains the law for practitioners; it is not legal advice.
Regulations library
Every US state privacy law, on one map
24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.
- In force
- Coming into force
- Sector laws