Canadian Privacy, Anti-Spam and Accessibility Laws
Federal privacy laws, provincial requirements, and accessibility standards — and exactly how Canada Compliance AI helps with each today.
How the product helps
Readiness scores for CASL, PIPEDA and Law 25
A self-assessment scores each regulation and turns gaps into a task plan. AODA is covered with guidance today; automated daily scanning is planned for Fall 2026.
Regulation-specific next steps
Each task is tagged by regulation and priority, with guidance on what the law asks for.
Tracking federal reform
Bill C-36 was introduced on June 15, 2026 and is at second reading. It is not law yet; we update this page as it moves.
Federal Regulations
PIPEDA
Personal Information Protection and Electronic Documents Act
Scope
Federal
Coverage
Private sector across Canada (except AB, BC, QC for provincially-regulated entities)
Enforcer
Office of the Privacy Commissioner of Canada (OPC)
Maximum Fine
Offences up to $100,000 (via prosecution — the OPC cannot issue fines directly)
CASL
Canada's Anti-Spam Legislation
Scope
Federal
Coverage
All commercial electronic messages sent from or accessed in Canada
Enforcer
CRTC, Competition Bureau, OPC
Maximum Fine
$10M (individuals: $1M)
Bill C-27 (CPPA)
Consumer Privacy Protection Act
Scope
Federal
Coverage
Proposed replacement for PIPEDA — died on the Order Paper when Parliament was prorogued in January 2025
Enforcer
Privacy Commissioner + Tribunal (proposed)
Maximum Fine
Was proposed at up to 5% of global revenue
Bill C-36
Protecting Privacy and Consumer Data Act (proposed)
Scope
Federal
Coverage
Government bill introduced June 15, 2026 to enact a new privacy act and amend PIPEDA. PIPEDA remains in force until any replacement is passed and takes effect.
Enforcer
Not yet settled — the bill is still before Parliament
Maximum Fine
Not yet settled — content can change before passage
Provincial Privacy Laws
Quebec Law 25
An Act to modernize legislative provisions as regards the protection of personal information
Scope
Quebec
Coverage
All organizations collecting/using personal info in Quebec
Enforcer
Commission d'accès à l'information du Québec (CAI)
Maximum Fine
Penal fines up to $25M or 4% of worldwide turnover; administrative penalties up to $10M or 2%
PIPA (Alberta)
Personal Information Protection Act
Scope
Alberta
Coverage
Private sector organizations in Alberta
Enforcer
Office of the Information and Privacy Commissioner of Alberta
Maximum Fine
Administrative penalties
PIPA (British Columbia)
Personal Information Protection Act
Scope
British Columbia
Coverage
Private sector organizations in BC
Enforcer
Office of the Information and Privacy Commissioner of BC
Maximum Fine
Administrative penalties
Accessibility Standards
AODA
Accessibility for Ontarians with Disabilities Act
Scope
Ontario
Coverage
All Ontario businesses with 50+ employees
Enforcer
Accessibility Directorate of Ontario
Maximum Fine
$100,000/day (corporations)
Accessible Canada Act
Accessible Canada Act (ACA)
Scope
Federal
Coverage
Federally regulated organizations, Crown corporations
Enforcer
Canadian Accessibility Standards Development Organization
Maximum Fine
Administrative penalties
Start Monitoring All Regulations Today
Free assessment, then a 14-day free trial. Covers every regulation on this page.