Priority recommendations for Personal Information Protection and Electronic Documents Act (PIPEDA) reform
- Enforcement Powers
Establish stronger enforcement powers by providing the Privacy Commissioner with the power to issue binding orders, impose administrative monetary penalties (AMPs) and to conduct proactive audits.
- Fundamental Right to Privacy
Recognize privacy as a fundamental right in the purpose clause and in an embedded preamble.
- Children’s Privacy
Enhance children’s privacy rights by explicitly recognizing the best interests of the child and mandating the Privacy Commissioner to develop a code of practice for children’s privacy.
- De-identification
Promote innovation by including a framework for de-identification and anonymization.
- Right to Deletion and De-listing
Ensure that individuals maintain control over their personal information through a clear and explicit right to de-list and delete personal information.
- Privacy by Design and Privacy Impact Assessments
Enhance accountability by requiring organizations to implement privacy by design and conduct privacy impact assessments (PIAs) for high-risk activities.
- Trans-Border Data Flows
Promote international trade by instituting specific rules and requirements to protect personal information moving outside of the country.
