AI Regulation in Canada.
Canada has no federal AI-specific law in force as of August 6, 2026. The proposed Artificial Intelligence and Data Act, which would have regulated AI systems, did not become law, so companies currently rely on privacy, competition, electronic communications, and sector-specific rules, with enforcement including 2026 findings against OpenAI and X/xAI. There is no general federal AI licensing, model-registration, or mandatory risk-classification regime for private companies.
In force today5 instruments
Get the remaining 3 instruments and the founder FAQ. Free: subscribe once and every briefing on this device unlocks.
Already subscribed? Unlock →
- Bill C-36, the Protecting Privacy and Consumer Data Act, would replace PIPEDA with stronger privacy, enforcement, children’s-data, and automated-processing provisions; it is only at first reading and is not law.
- Bill C-34, the Safe Social Media Act, would create duties for regulated social media, chatbot, and online services, including child-safety and synthetic-content obligations; it is only at second reading.
- Bill C-277 on online deepfakes and the federal AI-transparency consultation could create targeted disclosure or synthetic-media rules, but neither currently binds companies.
Pending and recent legislation1 measures
Live from the Global AI Policy Radar.
Founder FAQAI law, regulators, what applies, what is next, penalties
Is there an AI-specific law in force here?
No. Canada has no federal AI-specific law in force today. The proposed Artificial Intelligence and Data Act in former Bill C-27 did not become law, and there is no general federal AI licensing, model-registration, or mandatory risk-classification regime for private companies.
Who are the key regulators for AI?
The Privacy Commissioner enforces privacy rules relevant to AI, including PIPEDA, and has issued 2026 findings against OpenAI and X/xAI. The Competition Bureau applies established competition and marketing rules to AI-related conduct. OSFI is relevant to federally regulated financial institutions and their use of AI models.
Which rules apply to AI systems today?
PIPEDA applies to personal information used in AI, including training data, prompts, user inputs, model outputs, profiling, and security safeguards, subject to substantially similar provincial laws. The Competition Act covers misleading AI claims, AI-enabled pricing, advertising, automated sales, and conduct that may restrict competition. CASL applies to commercial electronic messages sent by AI agents or automated systems, while the Directive on Automated Decision-Making applies to federal departments and agencies and OSFI Guideline E-23 applies to model risk management in federally regulated financial institutions.
What is coming next, and when?
The proposed Artificial Intelligence and Data Act did not become law, so no federal AI-specific regime is currently scheduled by the source. OSFI Guideline E-23 is phasing in and has a stated effective date of May 1, 2027. The source does not identify another future AI law or implementation date.
What are the enforcement and penalty risks?
Enforcement is becoming more active under existing laws, with the Privacy Commissioner issuing 2026 findings against OpenAI and X/xAI. The Competition Bureau can apply established rules to misleading AI claims, pricing, advertising, automated sales, and competition conduct. Companies may also face compliance risks under PIPEDA, CASL, federal automated-decision rules, and OSFI expectations, although the source does not specify penalty amounts.
Not legal advice. For educational purposes only. AI-researched against official sources (2026-08-06), links verified.