The Canadian government is gearing up to establish a comprehensive new digital regulatory body that will enforce online safety and privacy laws, taking over regulatory responsibilities from the privacy commissioner.
Critics are divided, with some dubbing the move a creation of a “super-regulator,” while others argue in favor of a robust regulatory agency to address the growing online challenges.
So, what exactly do we know about this proposed setup?
The government has introduced two significant tech policy bills: Bill C-34 focusing on digital safety, and Bill C-36 focusing on privacy. Bill C-34 aims to mandate social media platforms to block access for children under 16 temporarily and regulate AI chatbot companies’ responsible actions, among other measures. On the other hand, Bill C-36 sets higher standards for managing children’s data, grants Canadians the right to request data deletion, and demands transparency regarding automated decision-making.
Both bills will be overseen by the new Digital Safety and Data Protection Commission of Canada, comprising five cabinet-appointed members. The regulator is expected to be operational within 18 months.
What powers will this new regulator hold?
The commission will have the authority to issue binding orders to organizations and impose fines of up to $10 million or three percent of the global revenue for breaches. For severe offenses like obstructing the commission’s work, fines could escalate to $25 million or five percent of global revenue.
The regulator will make crucial decisions on implementing digital safety rules, such as assessing the effectiveness of age-verification methods and determining exemptions for social media platforms.
Legal expert Michael Geist has labeled the commission a “digital super-regulator” due to its broad scope of responsibilities.
How unique is this proposed regulatory structure?
According to experts, Canada’s decision to combine online safety and privacy regulation responsibilities under one body is rare globally. Other countries typically segregate these functions, unlike Canada’s dual approach.
The rationale behind this amalgamation is to provide a centralized authority for Canadians interacting with private companies on issues like children’s safety and data management.
Advocates emphasize the necessity of a potent regulator to oversee tech giants effectively. However, concerns have been raised about consolidating powers from the privacy commissioner into the new regulatory entity.
SEO Keyphrase: Canadian digital regulation

