← Global Privacy Laws Research Library
Digital Charter Implementation Act, 2022
An Act to enact the Consumer Privacy Protection Act, the Personal Information and Data Protection Tribunal Act and the Artificial Intelligence and Data Act
Digital Charter Implementation Act, 2022: Bill C-27: Canada
Prepared by Shubhank Suman · Last reviewed
Historical: not enacted
- Legal character
- Bill / proposed legislation
- Region
- North America
What it covers
Bill C-27 was a proposed federal Canadian digital-regulation package comprising three major components:
1. Consumer Privacy Protection Act
2. Personal Information and Data Protection Tribunal Act
3. Artificial Intelligence and Data Act (AIDA)
The official Parliament record shows that the Bill received second reading on 24 April 2023 but its committee consideration was never completed. The 44th Parliament session ended on 6 January 2025. (turn559927view0)
Why it matters
It is important because it represented a proposed transformation of Canada's federal privacy framework and an attempted introduction of federal AI legislation.
However:
It is not Canadian law.
No organisation should be described as complying with "Bill C-27" as though it were an operative statute.
Refer to it when
- Researching Canadian privacy-law reform
- studying the proposed replacement for PIPEDA
- researching AIDA
- studying Canadian proposed high-impact-AI regulation
- comparing Canada's proposed AI model with enacted AI laws
- understanding legislative history.
AI, privacy and cybersecurity relevance
- AI: Very High
- Privacy: Very High
- Cyber: High
AI
Very High historically.
AIDA was proposed as Canada's federal AI regulatory framework.
Privacy
Very High historically.
The Bill attempted major federal privacy reform.
Cybersecurity
High / indirect.
AIDA focused on AI risks rather than being a general cybersecurity statute.
Applicability
No current statutory applicability.
Current validity
NOT ENACTED.
The relevant current Canadian privacy law should instead be researched separately, particularly PIPEDA and applicable provincial legislation.
Read first
Bill structure → proposed CPPA → proposed Tribunal → AIDA → high-impact AI → risk mitigation → monitoring → enforcement.
Provisions / sections covered
PRIVACY COMPONENT
The proposed Consumer Privacy Protection Act would have replaced/reformed the federal private-sector privacy framework, including:
- consent
- individual rights
- organisational accountability
- privacy management programmes
- security safeguards
- breach requirements
- enforcement.
The proposed Tribunal Act would have established a specialised appeal/adjudication architecture.
AI COMPONENT: AIDA
AIDA was Part 3.
Its proposed architecture focused on:
- high-impact AI
- identification and mitigation of risks
- monitoring
- recordkeeping
- transparency
- material-harm reporting
- audits
- ministerial powers.
The parliamentary record identifies AIDA as part of Bill C-27's original legislative package (Parliament of Canada)
IMPORTANT STATUS
The official Parliament record is particularly important here because it states:
- second reading completed
- committee consideration not completed
- report stage not reached
- third reading not reached
- Senate stages not reached (Parliament of Canada)
Therefore this resource should have a highly visible:
HISTORICAL: PROPOSED: NOT ENACTED
badge.
Subject-matter tags
- Consent
- Security
- Cross-border transfers
- Data protection officer
- Enforcement and penalties
- Surveillance
- Transparency
- AI cybersecurity
- Accountability
Subject-matter tags describe what the indexed text discusses. They are not legal conclusions.
Related instruments in this library
- Artificial Intelligence and Data Act (AIDA), CanadaBill · HistoricalSame jurisdiction; assess applicability separately.
- Operationalizing the Gen-AI Voluntary Code of Conduct for Canadian Critical Infrastructure EntitiesGuidance · Voluntary / non-bindingSame jurisdiction; assess applicability separately.
- Personal Information Protection and Electronic Documents Act: PIPEDA: CanadaLaw · CurrentSame jurisdiction; assess applicability separately.
- Voluntary Code of Conduct on the Responsible Development and Management of Advanced Generative AI Systems, CanadaCode of Conduct · Voluntary / non-bindingSame jurisdiction; assess applicability separately.
- Canada's Anti-Spam Legislation (CASL), S.C. 2010, c. 23Law · Current (phased commencement)Same jurisdiction; assess applicability separately.
Document page in the Knowledge Base - full text or PDF where it is available for this record.
This library locates primary and official sources. It does not interpret the law and it is not legal advice.