“Canada Privacy Commissioner Daniel Therrien said key parts of the proposed Consumer Privacy Protection Act (CPPA, also known as Bill C-11) won’t increase consumers’ control over their data. He suggested quick and effective remedies for violating the law and encouraged innovation.
“[The CPPA “leaves out an important facet of our current legislation, the idea that meaningful consent requires that the person giving it understands the consequences of what they are consenting to.”
“Moreover, the privacy notices that serve as the basis for consent would still be allowed to use vague, if not obscure, language to describe the purposes for which companies intend to use a person’s data.”
“Bill C-11 lists only a few violations of the CPPA that justify administrative penalties. The list, Therrien noted, does not include obligations related to the form or validity of consumer consent for handling data, nor the numerous exceptions to consent, “which are at the core of protecting personal information.”
“It also does not include violations to the principle of accountability.”