Jurisdiction · 3 regulations

Canada: data, AI and cyber laws

3 regulations in Canada that affect companies handling data: Canada Bill C-36 (PPCDA), Canada Bill C-8 / CCSPA, PIPEDA. Part of Americas.

3 regulations

Add to calendar

Apple Calendar or Outlook Google Calendar Download .ics

Sort

	Status
Canada Bill C-36 (PPCDA) Bill C-36, An Act to enact the Protecting Privacy and Consumer Data Act	Proposed	Not set	None upcoming
Canada Bill C-8 / CCSPA Critical Cyber Systems Protection Act (enacted by Bill C-8, An Act respecting cyber security)	Enacted	Not set	None upcoming
PIPEDA Personal Information Protection and Electronic Documents Act	In force	Jan 1, 200125 years ago	None upcoming

Past deadlines

Date	Regulation	What happens	When
Jun 1520263 months ago	Canada CCSPACanada Bill C-8 / CCSPACanada Royal Assent	Royal Assent	3mo ago
Jun 1520263 months ago	Canada C-36Canada Bill C-36 (PPCDA)Canada Bill C-36 tabled (first reading)	Bill C-36 tabled (first reading)	3mo ago
Jun 1820251 year ago	Canada CCSPACanada Bill C-8 / CCSPACanada Bill C-8 introduced	Bill C-8 introduced	15mo ago
Nov 120187 years ago	PIPEDAPIPEDACanada Mandatory breach reporting	Mandatory breach reporting	7.9y ago
Jan 1200422 years ago	PIPEDAPIPEDACanada PIPEDA applies to all commercial activity	PIPEDA applies to all commercial activity	22.7y ago
Jan 1200125 years ago	PIPEDAPIPEDACanada PIPEDA Part 1 in force (phase 1)	PIPEDA Part 1 in force (phase 1)	25.7y ago

Rule changes by email

The morning after a new data, privacy or AI law, or a deadline change; nothing in quiet weeks.