Cybersecurity Policy Report, Privacy Act to Undergo Review by Canadian Government, (Apr 3, 2026)

By Tony Foley

Canadian Treasury Board President Shafqat Ali has announced the launch of a review of the Privacy Act, the country’s federal legislation governing how more than 250 government institutions collect, use, disclose, and protect the personal information of Canadians.

The announcement yesterday from the Treasury Board noted that the Privacy Act, which was implemented in 1983 but hasn’t been substantially updated since its enactment, is distinct from the Personal Information Protection and Electronic Documents Act (PIPEDA), which defines privacy obligations in the private sector. The government’s review will focus on modernization strategies designed to enhance service delivery, including allowing the secure sharing and reuse of data across government programs where it directly benefits individuals or the public. This could include establishing designated official sources of key data to reduce duplication and improve accuracy.

Contemplated updates to the act’s foundation include recognizing privacy as a fundamental right, adding clear principles and definitions aligned with international standards, and harmonizing personal information access request processes. The announcement includes links to supporting documents for review, including the current text of the act and a policy paper on modernization proposals. Comments and feedback on the policy paper will be collected through the government’s digital feedback form through July 10.

News: InternationalLegislation DataPrivacy DataSecurity