Tag: CPPA

Digital Charter Implementation Act and CPPA

CPPA: problems and criticisms – automated decision makingCPPA: problems and criticisms – automated decision making

December 18, 2022December 18, 2022 Barry SookmanBarry Sookman 0 Comments

Canada is planning to revamp its comprehensive privacy law by repealing the existing comprehensive privacy law, PIPEDA, and by enacting Bill C-27, the Digital Charter Implementation Act (“DCIA”) to enact the Consumer Privacy Protection Act (CPPA), Personal Information and Data Protection Tribunal Act (PIDTA), and Artificial Intelligence and Data Act (AIDA). Bill C-27 replaced Bill C-11 (the former drafts of the CPPA and PIDTA). While the DCIA attempts to rectify some of the criticisms with Bill C-11, many of the problems remain and problems have emerged in the new Bill.…

Read FullRead Full
Digital Charter Implementation Act and CPPA

CPPA: problems and criticisms – appropriate purposesCPPA: problems and criticisms – appropriate purposes

October 31, 2022October 31, 2022 Barry SookmanBarry Sookman 0 Comments

Canada is planning to revamp its comprehensive privacy law by repealing the existing comprehensive privacy law, PIPEDA, and by enacting Bill C-27, the Digital Charter Implementation Act (“DCIA”) to enact the Consumer Privacy Protection Act (CPPA), Personal Information and Data Protection Tribunal Act (PIDTA), and Artificial Intelligence and Data Act (AIDA). Bill C-27 replaced Bill C-11 (the former drafts of the CPPA and PIDTA). While the DCIA attempts to rectify some of the criticisms with Bill C-11, many of the problems remain and problems have emerged in the new Bill.…

Read FullRead Full
Digital Charter Implementation Act and CPPA

The Digital Charter Implementation Act: problems and criticisms – the preambleThe Digital Charter Implementation Act: problems and criticisms – the preamble

October 11, 2022October 11, 2022 Barry SookmanBarry Sookman 0 Comments

Canada is planning to revamp its comprehensive privacy law by repealing the existing privacy law, PIPEDA, and by enacting Bill C-27, the Digital Charter Implementation Act (“DCIA”). This law would enact three separate but interrelated laws, the Consumer Privacy Protection Act (CPPA), Personal Information and Data Protection Tribunal Act (PIDTA), and Artificial Intelligence and Data Act (AIDA). Bill C-27 replaced Bill C-11 (the former drafts of the CPPA and PIDTA). While the DCIA attempts to rectify some of the criticisms with Bill C-11, many of the problems remain and problems have emerged in the new Bill.…

Read FullRead Full
automated decision making

Using privacy laws to regulate automated decision makingUsing privacy laws to regulate automated decision making

April 30, 2021April 30, 2021 Barry Sookman Charles Morgan Adam GoldenbergBarry Sookman Charles Morgan Adam Goldenberg 0 Comments

Making decisions about individuals using computers and computer algorithms is now commonplace. There are now also increasing proposals to use privacy laws to regulate automated decision making. One of the first explicit attempts to regulate automated decision-making using privacy laws is the European Union General Data Protection Regulation (GDPR).  More recently (and locally), both the Consumer Privacy Protection Act (CPPA), Canada’s proposed controversial new privacy law, and Bill 64, Quebec’s proposed privacy amendments, would enact new transparency and explainability obligations for automated decision making.…

Read FullRead Full
what the CPPA means for you

Crestview panel on what the CPPA means for CanadiansCrestview panel on what the CPPA means for Canadians

March 4, 2021March 4, 2021 Barry SookmanBarry Sookman 0 Comments

I had the pleasure of participating today in a Crestview moderated panel that focused on what the CPPA means for Canadians. I was joined by Jackie Choquette, Interim Practice Lead, Government Relations, Crestview Strategy, Sarina Rehal, Vice President, Crestview Strategy, and Bill Abbott, Director Data Policy and Research, Data & Trust Office, TELUS.

You can view a recording of the Crestview moderated panel below:

If you just want to see the slides used at the Crestview moderated panel, they are below:…

Read FullRead Full
Liability under the CPPA

Liability under the CPPALiability under the CPPA

January 28, 2021January 28, 2021 Barry SookmanBarry Sookman 0 Comments

The headlines about the new proposed federal privacy law, the Consumer Privacy Protection Act (“CPPA”), frequently focus on the extremely high penalties and fines for non-compliance. But, these headline miss by a wide margin how onerous liability under the CPPA will be.

The liability under the CPPA will be a major departure from the PIPEDA regime. The changes are explained in the detailed blog post, The CPPA’s Privacy Law Enforcement Regime published by McCarthy Tetrault lawyers Gillian Kerr, Nikiforos Iatrou, Pippa Leslie and I (with help from Daanish Pasricha).…

Read FullRead Full
AIDA - Regulation of AI systems in Canada

CPPA: transfers of personal information to service providersCPPA: transfers of personal information to service providers

November 23, 2020November 23, 2020 Barry SookmanBarry Sookman 0 Comments

The Consumer Privacy Protection Act (CPPA) will make substantial changes to Canada’s privacy law. As noted previously, the bill includes many of the provisions in the Personal Information Protection and Electronic Documents Act (PIPEDA), plus a lot more. In some cases, it builds on the provisions of PIPEDA, on the guidance and decisions of the Commissioner, but includes changes designed either to clarify or change the law. A case in point are the very important new provisions which address transfers of personal information to service providers.…

Read FullRead Full