🇨🇦PIPEDAQuebec Law 25OPC

AI governance in Canada.

Canada's federal AI Act (AIDA) lapsed in January 2025. But Quebec Law 25, one of North America's strongest privacy laws, is in force, PIPEDA applies federally, and human rights obligations apply to discriminatory AI outcomes. Canada is active, not absent, on AI governance.

Key facts for organisations

▸Canada's proposed federal AI Act (AIDA, part of Bill C-27) died when Parliament was prorogued in January 2025. Canada does not currently have a standalone federal AI law.
▸Quebec's Law 25 is one of North America's strongest privacy laws and creates specific AI obligations, automated decision-making transparency, profiling disclosure, and privacy impact assessments, that apply to organisations with Quebec customers.
▸Federal PIPEDA applies to AI systems processing personal information in commercial activity. The OPC has published specific AI guidance and conducted investigations into AI systems including facial recognition.
▸Canada is a member of the Global Partnership on AI (GPAI) and participates in international AI safety institute coordination, including with Australia's AISI.
▸The Canadian Human Rights Act and provincial human rights codes apply to discriminatory AI outcomes in employment, services, and accommodation, with no specific AI carve-out.
▸Australian organisations with Canadian operations must comply with both PIPEDA (federal) and Quebec Law 25 (for Quebec operations) when processing Canadian personal information through AI systems.

Regulatory frameworks

PIPEDAIn force

Personal Information Protection and Electronic Documents Act, federal private sector privacy law. Applies to AI systems processing personal information. OPC has published specific AI guidance under PIPEDA.

Quebec Law 25In force (phased)

Quebec's Act Respecting the Protection of Personal Information in the Private Sector, one of North America's strongest privacy laws. Automated decision-making transparency requirements in force from 2023; profiling obligations from 2024. Often described as Canada's GDPR.

AIDALapsed (Jan 2025)

The Artificial Intelligence and Data Act was Canada's proposed federal AI law, part of Bill C-27. It died on the order paper when Parliament was prorogued in January 2025. Canada does not currently have a federal AI-specific law.

OPC AI GuidanceActive

The Office of the Privacy Commissioner has published guidance on AI and privacy under PIPEDA, covering automated decision-making, facial recognition, and privacy-by-design for AI systems.

Americas hub United States

Key facts for organisations

▸Canada's proposed federal AI Act (AIDA, part of Bill C-27) died when Parliament was prorogued in January 2025. Canada does not currently have a standalone federal AI law.

▸Quebec's Law 25 is one of North America's strongest privacy laws and creates specific AI obligations, automated decision-making transparency, profiling disclosure, and privacy impact assessments, that apply to organisations with Quebec customers.

▸Federal PIPEDA applies to AI systems processing personal information in commercial activity. The OPC has published specific AI guidance and conducted investigations into AI systems including facial recognition.

▸Canada is a member of the Global Partnership on AI (GPAI) and participates in international AI safety institute coordination, including with Australia's AISI.

▸The Canadian Human Rights Act and provincial human rights codes apply to discriminatory AI outcomes in employment, services, and accommodation, with no specific AI carve-out.