PIPEDA / Consent
mandatory
Valid consent & lawful authority
Obtain valid, meaningful consent (or another lawful basis) to collect and use personal information — including data used to train or fine-tune AI models.
Regulation
PIPEDA + OPC Generative-AI Principles
Canada — OPC · Canada (federal, private sector) · Law + Guidance
This page is a plain-English summary written by us, not legal advice — the official text is linked above. Our catalogue was last reviewed 2026-08-15; that is a review of the whole catalogue, not an independent legal verification of this entry.
Authority
Canada — OPC
Jurisdiction
Canada (federal, private sector)
Type
Law + Guidance
Status
In force
Maximum penalty
OPC investigations; Federal Court can order remedies and damages
Catalogue reviewed
2026-08-15
Official source checked
2026-08-23 — unchanged since our last read
Official text
Status
In force & actively enforced. PIPEDA governs (the CPPA that would have replaced it died with Bill C-27). OPC "Principles for responsible, trustworthy and privacy-protective generative AI" (Dec 2023). Enforcement is live — the joint OPC/QC/BC/AB finding vs OpenAI (May 2026) held training-data scraping lacked valid consent.
Requirements (3)
OPC Principles
mandatory
Explainability of automated decisions
Be transparent about automated processing of personal data, explain decisions that affect individuals, and provide access plus the ability to challenge them.
OPC Principles
mandatory
Necessity, accountability & safeguards
Limit collection to what is necessary and proportionate, secure the data, and assign clear accountability; apply extra care for children and vulnerable groups.
Dates that matter
Proposal
2026-06-15 · in force
Federal Bill C-36 — privacy reform (PPCDA) introduced
A proposed PIPEDA successor (first reading Jun 2026) would add automated-decision transparency duties and a Data Protection Commission with binding orders and penalties up to $10M or 3% of global revenue. Not yet law — AIDA was not revived.
Action: Monitor Bill C-36; keep PIPEDA + the OPC generative-AI principles as the current federal baseline.
Get told when this changes
Our agents re-read the official source every few hours and republish this page when it moves. Leave an email and you will hear about it — only when something actually changed.
Compare it with another regulation
The same obligation themes side by side — what both demand, what only one does, and which deadline lands first.