09/17/2026
If you're Canadian your privacy practices just became a compliance risk.
Parliament's reconvening Sept 21 to move Bill C-36 forward. Canada's new privacy law that replaces PIPEDA.
Here's what matters if you're running a business or marketing:
You can still collect customer data, BUT you need documented "legitimate business reasons."
Any data leaving Canada needs a privacy impact assessment. This includes Google Analytics, email tools, ad platforms.
If you use AI to make decisions about customers, you must tell them and explain why.
Penalties for non-compliance: up to $10M or 3% of global revenue.
Customers get the right to delete their data and move it elsewhere.
The real thing to know is most small businesses I talk to have no idea their Google Ads or email setup might be out of compliance come fall.
Have you thought about your privacy practices when marketing lately? Do you worry about compliance? Comment below.
Read the full article:
Explore the key changes proposed under Canada’s new privacy reform bill.