Current position
Overview
No AI-specific legislation is in force.
The Artificial Intelligence and Data Act (AIDA), part of Bill C-27, died on the order paper when Parliament prorogued in January 2025 and has not been reintroduced. The government has established the AI and Data Standardization Collaborative and maintains a voluntary Code of Conduct for Generative AI. Signatory to the Council of Europe Framework Convention on AI.
Key legislation & sources
Canadian AI Safety Institute
Bill C-27 (AIDA) — died on order paper
Voluntary Code of Conduct for Generative AI
Council of Europe Framework Convention on AI (CETS 225)
Regulatory developments
Latest updates
Latest event import:
Updates sourced from Digital Policy Alert ↗. The latest available entries for this jurisdiction.
consultation closed
Minister of Artificial Intelligence and Digital Innovation closes consultation on inquiry into AI transparency
Source: Digital Policy Alert · View update ↗
closure
Canadian privacy authorities concluded joint investigation into OpenAI OpCo for alleged violations of Canadian private sector privacy laws
Source: Digital Policy Alert · View update ↗
adoption
Information and Privacy Commissioner of Ontario released guidance on AI scribes in health sector
Source: Digital Policy Alert · View update ↗
On 28 January 2026, the Information and Privacy Commissioner of Ontario released guidance on AI scribes in the health sector. The guidance sets out considerations on the development, procurement, and use of artificial intelligence scribes in Ontario’s health sector. It addresses privacy-related obligations under the Personal Health Information Protection Act and refers to the Enhancing Digital Security and Trust Act where applicable. The guidance defines artificial intelligence systems and AI scribes and outlines fundamental principles for the responsible use of artificial intelligence developed jointly with the Ontario Human Rights Commission. It specifies expectations on governance and accountability frameworks, risk management, data minimisation and purpose limitation, privacy impact assessments, security safeguards, breach notification, training and awareness, transparency, and human oversight. It further sets out obligations for developers of AI scribes, custodians who procure AI scribes, and custodians who use AI scribes.
adoption
Office of the Information and Privacy Commissioner for British Columbia released guidance on PIPA and AI scribes for healthcare organisations in British Columbia
Source: Digital Policy Alert · View update ↗
On 28 January 2026, the Office of the Information and Privacy Commissioner for British Columbia released the guidance titled PIPA and AI scribes: best practices for healthcare organizations in BC. The guidance addresses healthcare organisations subject to the British Columbia Personal Information Protection Act (PIPA) that are considering the use of artificial intelligence scribes in clinical settings. It sets out how PIPA applies to the collection, use and disclosure of personal information through AI scribes, including requirements on appropriate purposes under the reasonable person test, express consent from patients and, where applicable, employees, accuracy obligations, security arrangements, access and correction rights, retention and destruction duties, and accountability when personal information is handled by vendors.
announcement
Office of the Privacy Commissioner expanded investigation into X over data protection concerns pertaining to Grok's AI-generated deepfakes
Source: Digital Policy Alert · View update ↗
On 14 January 2026, the Office of the Privacy Commissioner of Canada expanded an ongoing investigation into X Corp pertaining to the use of the Grok chatbot to create sexualised Artificial Intelligence (AI)-generated deepfake images. The investigation examines compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA), including whether valid consent was obtained for the collection, use, and disclosure of Canadians’ personal information to create deepfakes and whether such processing complies with federal privacy law. The expanded investigation builds on an investigation opened on 27 February 2025 into X's use of personal data to train AI models.
Showing 5 of 30 available API entries. Dates and summaries are supplied by Digital Policy Alert.