In November 2020, Canada’s government introduced the Digital Charter Implementation Act. Included in the Act is the Consumer Privacy Protection Act, known as the CPPA. The CPPA would revamp consumer and data privacy laws in Canada, replacing the current Personal Information Protection and Electronic Documents Act (known affectionately as PIPEDA.) The CPPA offers a more modern and consumer-friendly approach to data privacy, bringing Canada more in line with Europe’s General Data Protection Regulation (GDPR) and California’s Consumer Protection Act of 2018 (CCPA.)
So what does that all mean?
First of all, the Digital Charter Implementation Act has not yet been signed into law. While Canada has made it clear that it is a top priority in 2021, there has been minimal motion on it since it was first introduced. Accordingly, this information is accurate as of July 2021, but the CPPA is likely to change significantly before it is actually a law. You can read the full current state of the proposal right here.
In general, the CPPA means that we are in full swing in a new era of data privacy. It is clear from the worldwide implementation of these sweeping changes that over the next decade, consumer-focused privacy will become the new norm. While the GDPR, CCCA, and CPPA all have their own nuances and unique takes, their general direction towards progress and data transparency is crystal clear.
What is changing?
The CPPA’s proposed changes include the right of disposal, where a user can ask a website to get rid of its personal information, and the right to data mobility, which allows users to move said personal information from one organization to another. The CPPA also simplifies PIPEDA’s data consent laws, basically requiring that organizations receive the user’s consent to collect their personal data before doing so. It will include increased enforcement powers and much higher fines for those who break the law, similar to GDPR.
Is that a big deal?
It’s a huge deal. If you have not heard about it yet, don’t be surprised. News of the CPPA has been all the rage in Canada, but is just recently starting to register here in America. When the Act is passed into law, most Canadian businesses will have to change their approach to online activity to follow the changes. In fact, plenty of Canadian companies – and companies that do business with Canadian clients online – are already working on getting in line with the proposed changes.
Where can I get help with data privacy?
For more on the CPPA, stay tuned to the Law Office of S. Grynwajc, PLLC. We will be sure to update you with the latest news as it comes out. For help bringing your online activity in line with recent data privacy changes, contact the Law Office of S. Grynwajc, PLLC today. We can empower your business to think globally and act locally.