{"id":14516,"date":"2020-11-19T08:22:49","date_gmt":"2020-11-19T16:22:49","guid":{"rendered":"https:\/\/www.privateinternetaccess.com\/blog\/?p=14516"},"modified":"2019-11-19T11:05:00","modified_gmt":"2019-11-19T11:05:00","slug":"canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr","status":"publish","type":"post","link":"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/","title":{"rendered":"Canada unveils its new privacy legislation \u2013 with even bigger fines than the GDPR"},"content":{"rendered":"<p>As this blog has frequently noted, the EU\u2019s General Data Protection Regulation (GDPR) plays a crucial role in the privacy world.  It not only creates protections for privacy online in the EU, it also provides <a href=\"https:\/\/www.privateinternetaccess.com\/blog\/how-privacy-activists-are-fighting-on-multiple-fronts-to-strengthen-eu-privacy-laws-that-will-have-a-global-impact\/\">a role model for other countries<\/a> looking to implement privacy laws of their own.  It shows that this complex area can be addressed by thoughtful law-making, and that strong protection for personal data is not incompatible with its central role in modern online activities like e-commerce.  For example, both <a href=\"https:\/\/www.epiqglobal.com\/en-us\/resource-center\/articles\/step-aside-gdpr-brazil-new-privacy-law\">Brazil<\/a> and <a href=\"https:\/\/www.reuters.com\/article\/us-kenya-dataprotection-idUSKBN1XI1O1\">Kenya<\/a> have passed data protection laws closely modelled on the GDPR.  Some of the <a href=\"https:\/\/www.mondaq.com\/unitedstates\/privacy-protection\/1005464\/cpra-rivals-gdpr39s-privacy-protections-while-emphasizing-consumer-choice\">better recent modifications<\/a> to the <a href=\"https:\/\/www.privateinternetaccess.com\/blog\/california-votes-to-expand-privacy-laws-to-allow-companies-to-make-you-pay-for-privacy\/\">California Consumer Protection Act<\/a> were also inspired by ideas in the EU legislation.  <\/p>\n<p>Now Canada plans to join the club of countries building on the GDPR\u2019s ideas, with a major update to its existing law in this area that will known as the <a href=\"https:\/\/www.canada.ca\/en\/innovation-science-economic-development\/news\/2020\/11\/new-proposed-law-to-better-protect-canadians-privacy-and-increase-their-control-over-their-data-and-personal-information.html\">Consumer Privacy Protection Act<\/a> (CPPA) if and when it is passed.  Canada\u2019s current Personal Information Protection and Electronic Documents Act (PIPEDA) dates back in 2000, when the data protection landscape was very different from what it is today.  There is <a href=\"https:\/\/www.ic.gc.ca\/eic\/site\/062.nsf\/eng\/h_00107.html\">a long background document on the proposed law<\/a> from the Canadian government, with detailed discussions of the issues involved.  However, a more approachable starting point is a blog post on the bill from Professor Michael Geist, one of <a href=\"https:\/\/www.michaelgeist.ca\/about\/\">Canada\u2019s leading experts on digital law<\/a>. He describes the CPPA as \u201c<a href=\"https:\/\/www.michaelgeist.ca\/2020\/11\/canadas-gdpr-moment-why-the-consumer-privacy-protection-act-is-canadas-biggest-privacy-overhaul-in-decades\/\">Canada\u2019s biggest privacy overhaul in decades<\/a>\u201c.  He notes that the <a href=\"https:\/\/www.parl.ca\/DocumentViewer\/en\/43-2\/bill\/C-11\/first-reading\">current text<\/a> is just a starting point.  There is likely to be significant lobbying to change parts of the bill, and some of the new rules require accompanying regulations, which could take years more to finalize after additional consultations.  In terms of the bill\u2019s current text, one of the most striking elements is the enforcement regime.  The Privacy Commissioner of Canada will be given a new power to order compliance with the law, and to recommend stiff new penalties for failing to do so:<\/p>\n<blockquote><p>the order making power comes with the ability to recommend penalties that in some cases are the highest in the G7. The potential penalties for contravening the law \u201cis the higher of $10,000,000 and 3% of the organization\u2019s gross global revenue in its financial year before the one in which the penalty is imposed.\u201d Moreover, there are even tougher penalties in cases of violations for failing to comply with some of the security breach disclosure rules, data retention requirements, identifying someone using de-identified data (except in limited circumstances), or sanctioning a whistleblower. In those circumstances, the penalties can reach $25,000,000 or 5% of the organization\u2019s gross global revenue.\u201d<\/p><\/blockquote>\n<p>What\u2019s interesting here is that a fine of 5% of global revenue is even higher than the GDPR\u2019s 4% figure.  It\u2019s a clear indication of how the EU has set a benchmark that Canada now evidently plans to surpass.  It emphasizes once more the importance of the GDPR in providing a framework that others can draw on, and which legitimizes their proposals.  <\/p>\n<p>The bill includes a new privacy right for data portability, which allows individuals to ask organizations to transfer their personal information elsewhere.  There is also an important access right with respect to algorithms.  The draft text says:<\/p>\n<blockquote><p>If the organization has used an automated decision system to make a prediction, recommendation or decision about the individual, the organization must, on request by the individual, provide them with an explanation of the prediction, recommendation or decision and of how the personal information that was used to make the prediction, recommendation or decision was obtained.<\/p><\/blockquote>\n<p>This goes beyond the corresponding part of the GDPR, <a href=\"https:\/\/gdpr-info.eu\/art-22-gdpr\/\">Article 22<\/a>, by requiring an explanation of how an algorithm arrived at its prediction, recommendation or decision.  Given the increasing importance of algorithms, and the corresponding concern over their transparency \u2013 or lack of it \u2013 the Canadian approach could well form the basis of other privacy laws in the future.  Another interesting element concerns de-identification of personal information, with strong penalties on those who violate the new standards.  The proposed law says that an organization must not use de-identified information \u201calone or in combination with other information to identify an individual\u201d, except for the purpose of carrying out testing of the effectiveness of security safeguards that have been put in place by the organization to protect the information. As Geist rightly points out, de-identification has been a particularly hot issue in Canada in part because of the public battle over <a href=\"https:\/\/www.privateinternetaccess.com\/blog\/?s=sidewalk\">Sidewalk Labs\u2019 plans in Toronto<\/a>, discussed several times on this blog, and now <a href=\"https:\/\/medium.com\/sidewalk-talk\/why-were-no-longer-pursuing-the-quayside-project-and-what-s-next-for-sidewalk-labs-9a61de3fee3a\">shut down<\/a>. <\/p>\n<p>A novel idea suggested in the draft text is that organizations may create a \u201ccode of practice\u201d, which   \u201cprovides for substantially the same or greater protection of personal information as some or all of the protection provided under this Act.\u201d  On the key matter of standards of consent, the bill establishes basic requirements for what must be included for consent to be valid.  There is a prohibition on making consent a requirement for a product or service beyond what is strictly necessary.<\/p>\n<p>There are some other elements in the CPPA that Geist discusses, and he also promises more posts with analysis in the weeks to come \u2013 he\u2019s already written one looking at what he calls \u201c<a href=\"https:\/\/www.michaelgeist.ca\/2020\/11\/privacy-pressure-points-a-closer-look-at-ten-consumer-privacy-protection-act-concerns\/\">ten pressure points<\/a>\u201c.  Even though the current text is likely to change in various ways, it is clear that Canada\u2019s proposed privacy law will be one of the most important, alongside the GDPR, and a useful further example of how to draft legislation offering strong privacy protection in the digital world.<\/p>\n<p>Featured image by <a href=\"https:\/\/commons.wikimedia.org\/wiki\/File:Centre_Block_-_Parliament_Hill.jpg\">Saffron Blaze<\/a>. <\/p>\n","protected":false},"excerpt":{"rendered":"<p>As this blog has frequently noted, the EU\u2019s General Data Protection Regulation (GDPR) plays a crucial role in the privacy world. It not only creates protections for privacy online in the EU, it also provides a role model for other countries looking to implement privacy laws of their own. It shows that this complex area &hellip; <a href=\"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Canada unveils its new privacy legislation \u2013 with even bigger fines than the GDPR&#8221;<\/span><\/a><\/p>\n","protected":false},"author":20,"featured_media":14527,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_stopmodifiedupdate":false,"_modified_date":"","footnotes":""},"categories":[1,130],"tags":[565,684,429,2086,2083,485,1422,2084,2085,1962],"class_list":["post-14516","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","category-governments","tag-algorithms","tag-brazil","tag-canada","tag-consent","tag-cppa","tag-gdpr","tag-kenya","tag-michael-geist","tag-portability","tag-reidentification"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.9 (Yoast SEO v26.9) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Canada unveils its new privacy legislation \u2013 with even bigger fines than the GDPR<\/title>\n<meta name=\"description\" content=\"As this blog has frequently noted, the EU&#039;s General Data Protection Regulation (GDPR) plays a crucial role in the privacy world. It not only creates\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Canada unveils its new privacy legislation \u2013 with even bigger fines than the GDPR\" \/>\n<meta property=\"og:description\" content=\"As this blog has frequently noted, the EU&#039;s General Data Protection Regulation (GDPR) plays a crucial role in the privacy world. It not only creates\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/\" \/>\n<meta property=\"og:site_name\" content=\"PIA\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/privateinternetaccess\/\" \/>\n<meta property=\"article:published_time\" content=\"2020-11-19T16:22:49+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2020\/11\/canada_-_Parliament_Hill.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"962\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Glyn Moody\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@http:\/\/twitter.com\/glynmoody\" \/>\n<meta name=\"twitter:site\" content=\"@buyvpnservice\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Glyn Moody\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/\"},\"author\":{\"name\":\"Glyn Moody\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/99ba810662cdf92245f61106c0c29775\"},\"headline\":\"Canada unveils its new privacy legislation \u2013 with even bigger fines than the GDPR\",\"datePublished\":\"2020-11-19T16:22:49+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/\"},\"wordCount\":935,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2020\/11\/canada_-_Parliament_Hill.jpg\",\"keywords\":[\"algorithms\",\"brazil\",\"canada\",\"consent\",\"cppa\",\"gdpr\",\"Kenya\",\"michael geist\",\"portability\",\"reidentification\"],\"articleSection\":[\"General Privacy News\",\"Governments\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/\",\"name\":\"Canada unveils its new privacy legislation \u2013 with even bigger fines than the GDPR\",\"isPartOf\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2020\/11\/canada_-_Parliament_Hill.jpg\",\"datePublished\":\"2020-11-19T16:22:49+00:00\",\"description\":\"As this blog has frequently noted, the EU's General Data Protection Regulation (GDPR) plays a crucial role in the privacy world. It not only creates\",\"breadcrumb\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/#primaryimage\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2020\/11\/canada_-_Parliament_Hill.jpg\",\"contentUrl\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2020\/11\/canada_-_Parliament_Hill.jpg\",\"width\":1280,\"height\":962},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.privateinternetaccess.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Canada unveils its new privacy legislation \u2013 with even bigger fines than the GDPR\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#website\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/\",\"name\":\"PIA\",\"description\":\"Online privacy news from around the world.\",\"publisher\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.privateinternetaccess.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#organization\",\"name\":\"Private Internet Access\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/07\/pialogowhitekglogo.png\",\"contentUrl\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/07\/pialogowhitekglogo.png\",\"width\":1200,\"height\":1200,\"caption\":\"Private Internet Access\"},\"image\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/privateinternetaccess\/\",\"https:\/\/x.com\/buyvpnservice\",\"https:\/\/www.instagram.com\/piavpn\/\",\"https:\/\/www.youtube.com\/channel\/UClyJZ47Rizb1xnwuKXDI0_w\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/99ba810662cdf92245f61106c0c29775\",\"name\":\"Glyn Moody\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/220b7317aa40ea679b23b79c368761eb6fd45039d978354b06dc7683a812d2fc?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/220b7317aa40ea679b23b79c368761eb6fd45039d978354b06dc7683a812d2fc?s=96&d=mm&r=g\",\"caption\":\"Glyn Moody\"},\"description\":\"Glyn Moody is a freelance journalist who writes and speaks about privacy, surveillance, digital rights, open source, copyright, patents and general policy issues involving digital technology. He started covering the business use of the Internet in 1994, and wrote the first mainstream feature about Linux, which appeared in Wired in August 1997. His book, \\\"Rebel Code,\\\" is the first and only detailed history of the rise of open source, while his subsequent work, \\\"The Digital Code of Life,\\\" explores bioinformatics - the intersection of computing with genomics.\",\"sameAs\":[\"http:\/\/opendotdotdot.blogspot.com\/\",\"https:\/\/www.linkedin.com\/in\/glynmoody\/\",\"https:\/\/x.com\/http:\/\/twitter.com\/glynmoody\"],\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/author\/glynmoody\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Canada unveils its new privacy legislation \u2013 with even bigger fines than the GDPR","description":"As this blog has frequently noted, the EU's General Data Protection Regulation (GDPR) plays a crucial role in the privacy world. It not only creates","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/","og_locale":"en_US","og_type":"article","og_title":"Canada unveils its new privacy legislation \u2013 with even bigger fines than the GDPR","og_description":"As this blog has frequently noted, the EU's General Data Protection Regulation (GDPR) plays a crucial role in the privacy world. It not only creates","og_url":"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/","og_site_name":"PIA","article_publisher":"https:\/\/www.facebook.com\/privateinternetaccess\/","article_published_time":"2020-11-19T16:22:49+00:00","og_image":[{"width":1280,"height":962,"url":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2020\/11\/canada_-_Parliament_Hill.jpg","type":"image\/jpeg"}],"author":"Glyn Moody","twitter_card":"summary_large_image","twitter_creator":"@http:\/\/twitter.com\/glynmoody","twitter_site":"@buyvpnservice","twitter_misc":{"Written by":"Glyn Moody","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/#article","isPartOf":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/"},"author":{"name":"Glyn Moody","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/99ba810662cdf92245f61106c0c29775"},"headline":"Canada unveils its new privacy legislation \u2013 with even bigger fines than the GDPR","datePublished":"2020-11-19T16:22:49+00:00","mainEntityOfPage":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/"},"wordCount":935,"commentCount":0,"publisher":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/#primaryimage"},"thumbnailUrl":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2020\/11\/canada_-_Parliament_Hill.jpg","keywords":["algorithms","brazil","canada","consent","cppa","gdpr","Kenya","michael geist","portability","reidentification"],"articleSection":["General Privacy News","Governments"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/","url":"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/","name":"Canada unveils its new privacy legislation \u2013 with even bigger fines than the GDPR","isPartOf":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/#primaryimage"},"image":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/#primaryimage"},"thumbnailUrl":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2020\/11\/canada_-_Parliament_Hill.jpg","datePublished":"2020-11-19T16:22:49+00:00","description":"As this blog has frequently noted, the EU's General Data Protection Regulation (GDPR) plays a crucial role in the privacy world. It not only creates","breadcrumb":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/#primaryimage","url":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2020\/11\/canada_-_Parliament_Hill.jpg","contentUrl":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2020\/11\/canada_-_Parliament_Hill.jpg","width":1280,"height":962},{"@type":"BreadcrumbList","@id":"https:\/\/www.privateinternetaccess.com\/blog\/canada-unveils-its-new-privacy-legislation-with-even-bigger-fines-than-the-gdpr\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.privateinternetaccess.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Canada unveils its new privacy legislation \u2013 with even bigger fines than the GDPR"}]},{"@type":"WebSite","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#website","url":"https:\/\/www.privateinternetaccess.com\/blog\/","name":"PIA","description":"Online privacy news from around the world.","publisher":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.privateinternetaccess.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#organization","name":"Private Internet Access","url":"https:\/\/www.privateinternetaccess.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/07\/pialogowhitekglogo.png","contentUrl":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/07\/pialogowhitekglogo.png","width":1200,"height":1200,"caption":"Private Internet Access"},"image":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/privateinternetaccess\/","https:\/\/x.com\/buyvpnservice","https:\/\/www.instagram.com\/piavpn\/","https:\/\/www.youtube.com\/channel\/UClyJZ47Rizb1xnwuKXDI0_w"]},{"@type":"Person","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/99ba810662cdf92245f61106c0c29775","name":"Glyn Moody","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/220b7317aa40ea679b23b79c368761eb6fd45039d978354b06dc7683a812d2fc?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/220b7317aa40ea679b23b79c368761eb6fd45039d978354b06dc7683a812d2fc?s=96&d=mm&r=g","caption":"Glyn Moody"},"description":"Glyn Moody is a freelance journalist who writes and speaks about privacy, surveillance, digital rights, open source, copyright, patents and general policy issues involving digital technology. He started covering the business use of the Internet in 1994, and wrote the first mainstream feature about Linux, which appeared in Wired in August 1997. His book, \"Rebel Code,\" is the first and only detailed history of the rise of open source, while his subsequent work, \"The Digital Code of Life,\" explores bioinformatics - the intersection of computing with genomics.","sameAs":["http:\/\/opendotdotdot.blogspot.com\/","https:\/\/www.linkedin.com\/in\/glynmoody\/","https:\/\/x.com\/http:\/\/twitter.com\/glynmoody"],"url":"https:\/\/www.privateinternetaccess.com\/blog\/author\/glynmoody\/"}]}},"_links":{"self":[{"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/posts\/14516","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/comments?post=14516"}],"version-history":[{"count":10,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/posts\/14516\/revisions"}],"predecessor-version":[{"id":29386,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/posts\/14516\/revisions\/29386"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/media\/14527"}],"wp:attachment":[{"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/media?parent=14516"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/categories?post=14516"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/tags?post=14516"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}