Global compliance guide

Canada Technology Compliance Hub

Plain English guide to tech regulation in Canada — updated July 2026

1. AIDA proposal

What it is: The Artificial Intelligence and Data Act was proposed within Bill C-27 but did not become law before that bill died on the order paper in 2025.
Who it applies to: There are no current AIDA duties. Developers and deployers should monitor any replacement federal AI legislation.
Key deadlines: No enacted deadline as of July 2026.
Penalties for non-compliance: No AIDA penalties apply because the proposal was not enacted.

Not sure if this applies to you? The free audit takes 4 minutes.

What it is: Federal and provincial rules for accountable, appropriate, and secure handling of personal information in commercial activity.
Who it applies to: Private-sector organisations, with the governing law depending on province, sector, and interprovincial or international activity.
Key deadlines: Ongoing. Breaches creating a real risk of significant harm must be reported as soon as feasible under PIPEDA.
Penalties for non-compliance: Certain PIPEDA offences can attract fines; provincial regimes can impose separate and sometimes higher sanctions.

Not sure if this applies to you? The free audit takes 4 minutes.

What it is: Bill C-27 proposed a Consumer Privacy Protection Act, tribunal legislation, and AIDA, but it was not enacted.
Who it applies to: No current obligations arise from Bill C-27 itself. Its concepts may influence future federal bills.
Key deadlines: No compliance deadline. Monitor replacement privacy and AI legislation.
Penalties for non-compliance: No Bill C-27 penalties apply because the bill did not become law.

Not sure if this applies to you? The free audit takes 4 minutes.

Operating across multiple jurisdictions? NudgeCompliant maps your obligations across all of them in one audit.

This guide is for information only — not legal advice. Requirements change, so confirm critical decisions with a qualified professional.

Tell us what technology you use and where you operate. Get a plain-English readout of what matters — and what doesn't.

No account. No card. Start with the obligations that matter now.