Privacy Law Reform


Issue at a Glance

Canada is facing the most significant changes to its private sector privacy laws in decades.

With privacy rules under reform across Canada, the CMA has been actively engaged with federal and provincial governments to provide feedback on behalf of the marketing community, and to ensure coordination of privacy rules across the country.

The CMA, in consultation with our Privacy and Data Committee, is engaged with governments at all levels on important issues related to privacy law reform. On this page, you can find more information about changes to the law, and the CMA’s advocacy initiatives.

For information on privacy compliance and best practices, including our guides and resources for the marketing community, please see our Privacy Protection webpage.



In November 2020, the government introduced Bill C-11 in the House of Commons. This was the first major attempt to change Canada's federal privacy law in two decades.

Bill C-11, which proposed to replace PIPEDA with a new Consumer Privacy Protection Act (CPPA), was not adopted before the last election.

The bill – with amendments in a few key areas - proposed a fair and effective approach to update Canada’s federal privacy law, and the CMA is advocating to ensure federal law reform continues to be a national priority.

Ontario: After wrapping up a summer 2021 consultation on the possibility of bringing a private sector privacy law to Ontario for the first time, Ontario is expected to continue to rely on federal law for private sector privacy protection.

British Columbia: A Special Committee of the Legislative Assembly consulted on reforming BC’s private sector privacy law, the Personal Information Protection Act (BC PIPA), in summer 2021. In December 2021, it released a report with 34 recommendations for reform, highlighting a number of important recommendations from the CMA.

Alberta: In summer 2021, Alberta launched a brief survey on the need to reform its own Personal Information Protection Act (AB PIPA). The survey did not include detailed proposals for reform, and more consultations are expected.

See the CMA’s responses to the above consultations here.

Quebec: In September 2021, Quebec’s Bill-64 received royal assent, ushering in a new private sector privacy law for the province. The new law, which includes significant enforcement penalties, new GDPR-like rights for consumers, and stringent consent and transparency requirements, will have important consequences for companies that do business in Quebec and those that handle the personal information of Quebec residents. Most of the law’s provisions will take effect in September 2023, and marketers should begin to prepare their compliance plans now. See the CMA’s recent blog, and stay tuned for upcoming CMA guidance.

The GDMA Global Privacy Principles serve as an ethical framework and best practice guidance for the global data and marketing industry.

A key aim of the new principles is to establish best practice guidance that the global data and marketing industry can use to strengthen existing self-regulatory privacy initiatives and codes worldwide. The principles will help organizations cultivate consumer trust and deliver a better customer experience by adhering to strong privacy principles – from being clear and transparent to respecting individual choices with respect to personal information.

The CMA is a champion of Data Privacy Week, an international effort to empower individuals and encourage businesses to respect privacy, safeguard data and enable trust.

For questions or comments about privacy law reform, marketers are encouraged to reach out to Fiona Wilson, CMA’s Director, Public Policy and Chief Privacy Officer.

Major Sponsors

  • BMO-800x450
  • Canada Post
  • CIBC-800x450
  • Environics Analytics
  • Microsoft
  • -420x120
  • TD-800x450

Featured Member

no fixed address logo