Canada Consumer Privacy Protection Act (CPPA)
This reform is expected to have a significant impact on businesses utilizing social media platforms to collect marketing data.
Prior to any data collection, individuals must knowingly offer consent for relinquishing their data. The consent requests must be clear and easily understood so that users are completely aware of the specific data being requested.
These data collection requests must not exceed what is strictly necessary for the business's objectives at the time of collection. Individuals will also have the option of withdrawing their consent within a time limitation.
Under the CPAA, individuals will have greater ownership of their personal data. As a result, organizations must inform individuals when they possess any personal data linked to them.
Furthermore, because individuals will be granted greater authority over their data, all requests to delete personal data storage must be honored.
Is Complying with CPPA Mandatory?
Once C-11 is passed, compliance is expected to be mandatory for all retailers and organizations processing personal information in Canada.
What are the penalties for not complying with CPPA?
A fine of up to $10 million, or 3% of global revenue (whichever is greater).