He emphasized aligning federal and provincial privacy laws to simplify regulatory compliance
Privacy Commissioner Philippe Dufresne emphasized the need for interoperable privacy laws during his appearance before Alberta’s Standing Committee on Resource Stewardship on its review of the province’s Personal Information Protection Act (PIPA).
In his presentation, Commissioner Dufresne emphasized the value of interoperable privacy laws and highlighted his office's recommendations for amendments to Bill C-27, the federal Digital Charter Implementation Act, which aims to replace existing federal privacy laws for the private sector.
Dufresne began by outlining his role as Privacy Commissioner, which involves overseeing compliance with both the federal Privacy Act and the Personal Information Protection and Electronic Documents Act (PIPEDA). He noted that his office’s priorities focus on privacy as a fundamental right, supporting public interest, and boosting trust in digital engagement.
Many of Dufresne’s remarks emphasized aligning federal and provincial privacy laws. He argued that an interoperable privacy framework not only enhances consumer trust but also simplifies regulatory compliance for businesses. "Canadians expect modernized privacy laws that enable technological benefits while ensuring personal data protection," Dufresne said in his speech. He highlighted how interoperability can foster confidence among Canadians that their data remains protected, regardless of where it is processed or transferred.
Dufresne further elaborated on the benefits of interoperability for businesses, noting that consistent privacy standards across jurisdictions reduce compliance burdens and costs, encouraging innovation. Alberta, Quebec, and British Columbia have provincial privacy laws deemed substantially similar to PIPEDA, allowing joint regulatory efforts. Dufresne noted that this collaborative framework has proven effective in cases like Clearview AI and Facebook Cambridge Analytica, where federal and provincial authorities worked together.
Turning to Bill C-27, Dufresne discussed the bill’s potential to enhance privacy rights by enacting the Consumer Privacy Protection Act, the Personal Information and Data Protection Tribunal Act, and the Artificial Intelligence and Data Act. He noted that Bill C-27 represents a significant improvement over PIPEDA, particularly in terms of stronger privacy safeguards and flexible innovation avenues. Dufresne has proposed 15 recommendations for Bill C-27, including recognizing privacy as a fundamental right, mandating privacy impact assessments for high-risk initiatives, and enhancing protections for children’s privacy.
The commissioner highlighted that certain recommendations have already been incorporated, such as amendments recognizing the importance of children’s privacy and addressing concerns regarding sensitive information and data profiling. He hoped that additional recommendations would be integrated as the bill advances through the legislative process.
Concluding his remarks, Dufresne emphasized that a harmonized privacy framework across Canada would reinforce consumer confidence and position the country as a leader in global privacy standards.
