Statement by the Privacy Commissioner of Canada to the Standing Committee on Access to Information, Privacy and Ethics on Main Estimates

May 7, 2026
Ottawa, ON

Opening statement by Philippe Dufresne
Privacy Commissioner of Canada

(Check against delivery)

---

Introduction

Mr. Chair, members of the Committee. Thank you for inviting me to discuss the Office of the Privacy Commissioner of Canada’s Main Estimates for Fiscal Year 2026-2027. With me today is Marc Chénier, Deputy Commissioner and Senior General Counsel.

My Office operates in a rapidly changing environment, one in which unprecedented volumes of Canadians’ personal information are being collected and used.

Evolving technologies bring opportunities to connect, to create, and to innovate. At the same time, technological advances pose new and complex issues for privacy.

In this context, prioritizing privacy is more important than ever. Appropriate safeguards are essential to ensuring that Canadians can benefit from new technologies without giving up their fundamental right to privacy.

Just yesterday, I announced the findings of a joint investigation into OpenAI’s AI-powered chatbot, ChatGPT. Through this milestone investigation, conducted with counterparts in Quebec, British Columbia, and Alberta, we identified privacy issues and made recommendations that led to improved protections for Canadians’ personal information.

I expect that the findings will also inform and advance the privacy-protective design of other AI-powered technologies.

Overview of key issues

As Privacy Commissioner, I continue to champion the protection of privacy in support of responsible innovation – setting the standard for a safer digital world for individuals, while supporting innovation, economic competitiveness and Canada’s digital sovereignty.

Several factors influence my Office’s capacity to deliver on our mandate and strategic priorities as effectively as possible. These include, for example, a significant increase in the complexity and volume of our work, fiscal constraints, and reliance on the courts to implement investigative findings.

Over the past year, my Office has concluded hundreds of investigations, including several high-profile ones such as TikTok, Google, and 23andMe. Earlier today, I released the findings of an investigation into breaches at the Canada Revenue Agency.

The number of complaints received by my Office in the last fiscal year has increased by 82 percent, to more than 6,000 complaints. This rise is also placing increased demand on the OPC’s limited resources.

At the time of writing our Departmental Plan, I noted that the temporary funding that had allowed my Office to reduce investigative backlogs had expired. I am pleased that the Government has since approved an extension of this funding for five years, as noted in the Spring Economic Update.

Without permanent funding, however, we will continue to face long-term resource constraints that limit my Office’s ability to effectively carry out its mission and keep pace with technological developments.

I welcome the Government’s recent announcement that it is reviewing the Privacy Act and I also remain optimistic about movement on private-sector law reform. Canada needs modernized privacy laws to reflect this modern world.

OPC’s response to the landscape

In early 2025, I launched a transformation plan aimed at building greater collaboration and cohesion across my Office and streamline processes, supporting more integrated, agile and strategic approaches. These changes support my strategic priority of maximizing our impact for Canadians.

The transformation plan includes implementing alternative approaches to full resource-intensive investigations, such as promoting compliance strategically, and using all of the tools at our disposal to better serve Canadians through more timely outcomes.

I also continue to advance my other two strategic priorities: addressing and advocating for privacy in this time of technological change, and championing children’s privacy.

I am committed to growing the OPC’s internal expertise on emerging technologies. Our team has developed an in-house AI that will deepen our understanding of a technology that we regulate, while also helping to optimize our work.

To support the children’s privacy priority, we have undertaken a number of initiatives such as establishing an OPC Youth Council. Earlier this week, I announced new guidance documents on age assurance.

Collaboration continues to be an important tool that extends well beyond compliance actions. My role as Chair of the Global Privacy Assembly, and participation in the G7 Data Protection and Privacy Authorities Roundtable, ensure that Canada is at the table to help influence the direction and future of privacy protection around the world.

Conclusion

At this time of rapid, unprecedented change, prioritizing privacy must be a collective imperative. Trust in how data is handled is an increasingly important factor in how individuals interact with government, businesses, and technology, which is a significant consideration, particularly during challenging economic times.

Thank you. I will now be happy to answer your questions.