This afternoon the Trudeau government begins its campaign to convince businesses that there\u2019s nothing to fear in its second attempt to update the federal privacy law covering the private sector.<\/p>\n
Innovation Minister Fran\u00e7ois-Philippe Champagne will address the Canadian Marketing Association\u2019s online privacy conference<\/a> on the new private-sector privacy law package, called the Digital Charter Implementation Act 2022 (Bill C-27).<\/p>\n The last time the government made an effort, then-federal privacy commissioner Daniel Therien led pointed criticism<\/a>, which didn\u2019t make much difference because the October, 2021 election was called and the proposed legislation died.<\/p>\n After making some changes and adding a crucial new piece, the legislation was re-introduced in June<\/a>.<\/p>\n It\u2019s composed of three parts:<\/p>\n \u2014 the Consumer Privacy Protection Act 2022<\/strong> (CPPA), which replaces the Personal Information Protection and Privacy Act (PIPEDA) but adds order-making powers for the Privacy Commissioner. Changes from the original version of the CPPA include making a distinction between de-identified and anonymized personal data, situations where businesses don\u2019t have to get explicit consent for the collection of personal data, and added obligatory protection for the data of children.<\/p>\n \u2014 the Personal Information and Data Protection Tribunal Act<\/strong>, which, as in the original legislation, creates a body appointed by the government to hear recommendations by the Privacy Commissioner for financial penalties for ignoring orders or not complying with the act;<\/p>\n \u2014 and the new Artificial Intelligence and Data Act<\/strong>, which will require \u201chigh-impact\u201d AI applications to follow as yet unwritten regulations to ensure risks of harm or bias are identified and mitigated.<\/p>\n While a new AI and Data Commissioner will be appointed to oversee this act, the Innovation Minister will have powers to order anyone responsible for a high-impact system causing harm or bias to hand over any records governing the system \u2014 possibly including software code \u2014 and\/or to have the system audited.<\/p>\n The legislation hasn\u2019t yet been sent to a House of Commons committee for detailed examination. That is expected before the end of the year.<\/p>\n The CPPA may face opposition from witnesses who feel it unnecessarily creates a time-wasting tribunal instead of letting the Privacy Commissioner levy fines. The government apparently doesn\u2019t want to make the commissioner a judge and jury.<\/p>\n So far, current Privacy Commissioner Philippe Dufresne has yet to make his analysis of the proposed bill public, and possibly won\u2019t until he testifies before the committee.<\/p>\n There will also likely be witnesses who will complain the new proposed CPPA allows exemptions in certain circumstances for the requirement of businesses to get explicit consent from individuals for the collection and use of personal data.<\/p>\n The new proposed AI bill will also come under close scrutiny for what it includes, and what it doesn\u2019t.<\/p>\n A preview of what parliamentary witnesses (and perhaps opposition MPs) may say on that bill came last month during sessions at a data and AI conference in Toronto.<\/p>\n Jill Briggs, head of policy and regulatory affairs at the Interactive Advertising Bureau of Canada<\/a>, said \u201cthere is a lot of discomfort\u201d among online advertisers at the lack of detail in the AI bill. \u201cIt\u2019s very blank,\u201d she said. \u201cThere\u2019s no [proposed] regulations. It just basically says if you have a high-risk system you\u2019re in a lot of trouble and you\u2019re going to get fined.\u2019 We don\u2019t even know what high-risk means. So I think there\u2019s a lot of work to be done.\u201d<\/p>\n Chetan Phull, senior associate lawyer in the cybersecurity, technology and data management practice at Deloitte Legal, noted that while the proposed AI law clearly allows an individual to sue for an AI system\u2019s alleged bias, that right may not cover groups who allege bias.<\/p>\n Mark Schaan, the Innovation department\u2019s senior assistant deputy minister for strategy and innovation policy, admitted he\u2019s heard complaints. Some have told him, \u201c\u2018This looks like a massive criminal liability coming our way, is it going to put a chill on the industry, how can we make sure you\u2019re going to get it right?\u2019,\u201d Schaan said.<\/p>\n But he believes the department has set a reasonable test for interfering in AI systems. Only \u201cthe most egregious\u201d systems showing evidence of causing significant and considerable harm, and with intent from the application operator, could possibly draw sanction, he said.<\/p>\n And the promised regulations would be written after \u201cextensive consultation\u201d with businesses, he added. They will \u201cfill in the colour\u201d to find a balance between encouraging innovation and giving Canadians trust in AI systems, he said.<\/p>\n Briefly, AI systems would have to meet accepted data management standards. Compliance measurement will be done through a \u201crobust and competitive private sector assurance ecosystem which could include accredited conformance assessment bodies, certification programs, and other assurance tools and service providers,\u201d Schaan said.<\/p>\n As for the CPPA, watch for critics at parliamentary hearings like Teresa Scassa, Canada Research Chair in Information Law and University of Ottawa law professor, who wrote in the Toronto Star<\/a> last month that the government \u201chas clearly listened more to the concerns of industry\u201d in C-27. \u201cHuman rights still take a back seat to commercial interests.\u201d<\/p>\n \u201cPrivacy by design and by default are absent from the bill,\u201d she complained, \u201cwhich still does not cover the growing exploitation of personal data by political parties. The exception for use of personal information without knowledge or consent for \u2018socially beneficially purposes\u2019 still has major holes and scant attention is paid to the flows of personal data across Canada\u2019s borders.\u201d\u2018<\/p>\n Scassa and others have called for CPPA<\/a> to clearly make privacy a right.<\/p>\n The conference starts at 3 p.m. Eastern, with a panel discussion on C-27. Champagne speaks at 4:15. Registration<\/a> is free for members of the Canadian Marketing Association, non-members pay $49.<\/p>\n The post Industry minister to address Canadian marketers on proposed privacy law<\/a> first appeared on IT World Canada<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":" Speech today will support the Liberal government’s second attempt at privacy<\/p>\n","protected":false},"author":17,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[421,58,25,361,16],"tags":[391,415,527,396,703,275],"class_list":["post-30629","post","type-post","status-publish","format-standard","hentry","category-governance","category-government-public-sector","category-marketing","category-privacy","category-security","tag-di","tag-government-of-canada","tag-legislation","tag-postmedia","tag-privacy-legislation","tag-top-story"],"acf":[],"_links":{"self":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts\/30629","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/comments?post=30629"}],"version-history":[{"count":2,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts\/30629\/revisions"}],"predecessor-version":[{"id":30677,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts\/30629\/revisions\/30677"}],"wp:attachment":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/media?parent=30629"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/categories?post=30629"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/tags?post=30629"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}