← Global AI Laws & Governance Research Library

Canada
BillHistorical· 44th Parliament, 1st Session

Artificial Intelligence and Data Act (AIDA), Canada

Prepared by Shubhank Suman · Last reviewed

HISTORICAL / PROPOSED / NOT ENACTED

Legal character
Proposed legislation
Region
North America

What it covers

AIDA was Part 3 of Bill C-27, a proposed federal package comprising the Consumer Privacy Protection Act, the Personal Information and Data Protection Tribunal Act, and the Artificial Intelligence and Data Act. It proposed regulation of certain private-sector AI systems in interprovincial and international trade, focusing on high-impact systems, risk assessment, mitigation, monitoring, recordkeeping and reporting. Committee consideration was not completed before the 44th Parliament ended on 6 January 2025.

Why it matters

It remains important legislative history for comparative research, but it never became operative Canadian law and must not be presented as a current compliance requirement.

Refer to it when

Use it for historical research on Canada's proposed high-impact-AI regime, Bill C-27, combined privacy and AI reform, risk mitigation, monitoring, audits and proposed enforcement.

AI, privacy and cybersecurity relevance

  • AI: Very High
  • Privacy: High
  • Cyber: High

AI

VERY HIGH RELEVANCE HISTORICALLY

The proposed architecture covered high-impact classification, harm and bias mitigation, monitoring, records, public descriptions, material-harm notification, audits, compliance and offences.

Privacy

HIGH RELEVANCE

AIDA formed part of the same package as the proposed Consumer Privacy Protection Act, which addressed accountability, privacy programmes, purpose limitation, consent, safeguards, individual rights, mobility and enforcement.

Cybersecurity

HIGH / INDIRECT RELEVANCE

AIDA was not a cybersecurity statute, but its risk, integrity, monitoring and incident architecture intersected with AI security.

Applicability

NO CURRENT STATUTORY APPLICABILITY. AIDA was proposed but not enacted.

Current validity

HISTORICAL: PROPOSED BILL, NOT ENACTED. AIDA is not operative Canadian law.

Read first

Part 3 → Sections 1–5 → Section 7 → Section 8 → Section 9 → Sections 10–12 → Sections 13–19 → Sections 29–40.

Provisions / sections covered

Sections 1–5: Definitions, application and purposes

Proposed the statutory terminology, application and overall purpose.

Sections 6–12: Data and high-impact AI duties

Addressed anonymized data, assessment of high-impact systems, risk measures, monitoring, records, public descriptions and material-harm notification.

Sections 13–19: Ministerial powers and audit

Would have enabled records requests, audits, implementation measures, cessation orders, publication and compliance processes.

Sections 29–40: Penalties, offences and Commissioner

Proposed administrative penalties, offences, ministerial powers, an AI and Data Commissioner and offences involving illegally obtained personal information or serious harm.

Subject-matter tags

  • Enforcement and penalties
  • Anonymisation
  • Surveillance
  • High-risk AI
  • Transparency
  • Human oversight
  • Risk management
  • AI cybersecurity
  • Accountability

Subject-matter tags describe what the indexed text discusses. They are not legal conclusions.

Related instruments in this library

Document page in the Knowledge Base - full text or PDF where it is available for this record.

This library locates primary and official sources. It does not interpret the law and it is not legal advice.