Appearance before the Standing Committee on Access to Information, Privacy and Ethics to discuss work of the OPC
October 6, 2025
Ottawa, ON
Opening statement by Philippe Dufresne
Privacy Commissioner of Canada
(Check against delivery)
Thank you, Mr. Chair, Members of the Committee, for the invitation to appear before you to discuss the work of my Office and the importance of prioritizing privacy.
As Privacy Commissioner of Canada, my mission is to protect and promote individuals’ fundamental right to privacy. This includes overseeing compliance with both the Privacy Act, which applies to federal institutions, and the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada’s federal private-sector privacy law.
At a time when more personal data is being collected and shared than ever before, often across borders, this is an essential mandate for Canadians.
From the moment that we start our day and check our phones, until the time that we wind down by streaming music or a favourite show, our personal data is being sought.
New technologies bring new opportunities to connect, to create, and to innovate. For organizations, personal information can be used to offer tailored services, refine operations, and evaluate results. But this also brings risks to our privacy.
This is a different reality than just a decade ago.
Canada’s privacy laws – and even the Office of the Privacy Commissioner of Canada (OPC) – were designed in and for a pre-digital time.
Since becoming Privacy Commissioner of Canada in 2022, I have advocated for modernization of Canada’s privacy laws, and for increased investment in data protection.
Prioritizing privacy must be our collective imperative at this time of unprecedented change.
Privacy matters to Canadians. The OPC’s latest public opinion research found that 9 in 10 are concerned about their privacy; 62% believe that government respects their privacy rights; and only 40% say the same about business.
The survey also showed that more than two-thirds of parents are moderately to extremely concerned about their children’s privacy online.
The number of privacy complaints made to my Office is rising – in the first quarter of the year the number of complaints had increased by 51% over the same quarter last year. This, along with increases in breach notifications, highlights the need for efficiencies, reform, and resources.
A necessary precondition to establishing trust in the digital economy is a privacy regulator with sufficient capacity to respond to privacy breaches and to carry out timely investigations.
It is within this context that my Office works to provide resources and guidance, respond to major privacy incidents, and keep pace with an ever-evolving digital world.
Last year, I established three key strategic priorities for my Office – maximizing impact, advocating for privacy in this time of technological change, and children’s privacy.
I believe that, as a small organization, it is important that we prioritize efforts on areas where we can have the greatest impact for Canadians and where the greatest risks lie if they are not addressed.
In January, I launched a transformation at the OPC, informed by a comprehensive review of internal structures and resources, to increase efficiencies, streamline operations, amplify results, and make our service to Canadians as efficient as possible.
Our response to the breach at PowerSchool this year is an example of this approach. My Office engaged with the company to achieve a timely resolution, by focusing on its response to the incident and implementation of measures that will result in stronger protections for the personal information of students, parents, and educators across Canada.
Domestic and international collaboration remains a central component of my tenure.
Last month, I was honoured to be elected Chair of the Global Privacy Assembly, the international forum which brings together the data protection and privacy authorities from all over the world.
Two weeks ago, I announced, along with my counterparts in Quebec, British Columbia, and Alberta, the findings of a joint investigation into TikTok. This federal-provincial collaborative effort generated increased awareness for Canadians and will lead to improvements to the company’s protection of children’s privacy.
I will conclude where I began – on the importance of prioritizing privacy.
Data has become one of the most important resources of the 21st century. Through modern laws, collaboration, and engagement, we can and we must create a regulatory environment that will benefit Canada’s economy, support Canadian businesses, and protect the privacy rights of Canadians.
I would be happy to answer your questions.
Related link
- Date modified: