Canada’s Privacy Act hasn’t been updated in 40 years. As the government finally opens a review, OpenMedia is launching a survey to make sure ordinary Canadians have a say. Here’s what’s at stake \u2014 and why your voice matters.<\/p>\n
\t\t\t\t\tA law from another era<\/p>\n
What life looked like in 1983? It was a time where the Internet wasn\u2019t popular yet. There were no smartphones, no social media, no AI hype. Many government records were still stored on paper. That’s the world Canada’s Privacy Act<\/a> was written for.<\/p>\n Over the past four decades, federal departments collect more personal information about Canadians than ever before \u2014 and they do it in ways that couldn’t have been imagined when the law came into force.<\/p>\n Your data is processed by algorithms, shared across departments, and increasingly used by AI systems to make decisions that affect your life. And the law that’s supposed to protect you? It hasn’t kept up. A reform of the Privacy Act is long overdue.<\/p>\n Back in 2021, our government first announced a consultation<\/a> on how to reform the Privacy Act \u2014 and our community jumped in with both feet! More than 4,000<\/a> of us shared our views on what public sector privacy reform should look like. And then\u2026 nothing. Liberal governments changed, but no public sector privacy reform bill was ever introduced, despite our community\u2019s clear demand for a comprehensive update.<\/p>\n The review is finally here<\/p>\n Take two! On April 2, 2026, the Treasury Board of Canada Secretariat announced a new formal review of the Privacy Act<\/a>. Along with the announcement, the government released a policy paper outlining 23 policy proposals<\/a> organized around six broad themes, aimed at:<\/p>\n \tenabling better, more integrated services for Canadians There are ideas to formally recognize privacy as a fundamental right, embed Indigenous data sovereignty directly into the Act, and give the Privacy Commissioner real powers to hold departments accountable. There’s also a proposal to establish a mandatory five-year review of the Privacy Act \u2014 so it can never fall this far behind again. The good news is that it incorporates many of our demands from last time; it seems our engagement made a lingering impact!<\/p>\n But here\u2019s the catch<\/p>\n Some of the proposals are genuinely promising, but the review is complicated.<\/p>\n Unlike past consultations<\/a>, which focused on privacy principles in plain terms, this one takes what experts are calling a “pragmatic<\/a>” approach. It combines discussions of privacy law with discussions of data infrastructure \u2014 the technical systems that determine how government data is actually built, stored, and shared. The result is a policy paper that often requires the kind of specialist knowledge most Canadians simply don’t have.<\/p>\n Take data sharing<\/a>. The government is proposing to make it easier for federal departments to share your personal data with each other \u2014 and with provincial, territorial, and municipal partners \u2014 without your consent, as long as there are safeguards in place. Whether that’s a good idea depends on what those safeguards actually look like, and the paper largely leaves those details to future regulations. To have a meaningful opinion on that, you’d need to understand how federal data systems work, what “safeguards” have meant in practice historically, and how similar approaches have played out in other countries.<\/p>\n The same challenge applies to proposals around AI accountability, privacy impact assessments, and the central registry the government wants to create for data-sharing notices. These are important issues with real consequences for ordinary Canadians, but the way they’re presented makes it hard for anyone outside the policy world to engage with them meaningfully.<\/p>\n That’s a problem. Because if only policy insiders and industry lobbyists show up to this review, the outcome will reflect their priorities \u2014 not yours.<\/p>\n That’s where you come in<\/p>\n OpenMedia has been fighting for real oversight, accountability, and transparency in how government institutions handle your data for years. As we mentioned, back in 2021<\/a>, we brought more than 4,000 community voices to the Department of Justice’s Privacy Act consultation \u2014 and we’re doing it again!<\/p>\n We’ve gone through all 23 proposals, cut through the policy language, and boiled everything down to 15 questions \u2014 most of them multiple choice \u2014 so you can tell us what the Privacy Act should look like.<\/p>\n Our survey covers the issues that matter most to ordinary Canadians like you:<\/p>\n \tHow much do you trust the government with your data? The decisions made in this review will shape how government institutions \u2014 from the RCMP to Service Canada \u2014 handle your personal information for generations. Ottawa needs to hear from ordinary Canadians before those decisions are made.<\/p>\n
\n\tstrengthening privacy protections for the digital age
\n\tupdating the rules and oversight of the federal privacy system<\/p>\n
\n\tWhat should govern how your data is shared?
\n\tWhat rights should you have when AI is used to make decisions about you?
\n\tWhat real accountability should look like when things go wrong?<\/p>\n