Canada has no overarching or sui generis database law; protection flows from copyright, common law trade secret principles, contracts, and privacy legislation, with the provinces playing a significant role. Under the Copyright Act, databases may be protected as compilations, but only the selection or arrangement of data is covered, and the Supreme Court in CCH Canadian v. Law Society of Upper Canada requires the exercise of 'skill and judgment' — mechanical or near-instantaneous compilation does not qualify, and purely AI-generated works are not protectable.
Trade secrets are protected primarily through the common law tort of breach of confidence, requiring that data be confidential, communicated in confidence, and misused by the recipient. A notable 2020 development added Section 391 to the Criminal Code, formally defining 'trade secret' and creating offenses for obtaining or communicating trade secrets by fraudulent means. Contract law remains flexible, but Ontario's 2021 prohibition on most employment non-compete agreements removed a traditional tool for protecting confidential data in employment relationships.
PIPEDA governs personal information federally, supplemented by provincial statutes in Alberta, British Columbia, and Québec, and courts have recognized privacy torts such as intrusion upon seclusion (Jones v. Tsige). Canada has no legislation addressing ownership or use of AI training data; as of 2024, training datasets, synthetic data, and AI-generated outputs fall under existing copyright, contract, and privacy laws — a regulatory gap that remains open: the proposed Artificial Intelligence and Data Act (AIDA, Bill C-27) died on the Order Paper at prorogation on 6 January 2025, and Bill C-36 (2026) revives privacy reform only, with no AI framework.
Key takeaways
- Database copyright in Canada demands human 'skill and judgment' in selection or arrangement, excluding mechanical and AI-generated compilations.
- Trade secret protection rests on the common law breach of confidence tort, now reinforced by criminal offenses under Criminal Code Section 391 (2020).
- Ontario's ban on most non-compete clauses means employers should rely on confidentiality agreements and NDAs to protect data in employment contexts.
- Data contracts must be drafted with PIPEDA and provincial privacy compliance in mind, including meaningful consent for AI uses of personal data.
- AI training data and outputs are governed only by existing copyright, contract, and privacy law; AIDA died at prorogation in January 2025 and no successor AI bill has been introduced.
Primary legal instruments
AI-assisted summary of the report, editorially reviewed before publication · AI transparency
Protection mechanisms
Report-derived analysis per mechanism. The report text is fixed; committee members with contributor access can revise the rating (with an audit trail) and add notes below each block.
Recent Developments
Live updates contributed by committee members and the AI research bot — separate from the fixed report content above.
Insights from Research on Personal Data Collection by Smart Devices and AI
The Office of the Privacy Commissioner of Canada (OPC) has published summaries of projects funded under its 2025-2026 Contributions Program. These projects explored various aspects of personal information collection by smart devices, FemTech, machine listening, and connected vehicles. The research aims to generate new ideas for safeguarding personal data and inform policy development, contributing to better data governance practices.
Privacy Commissioner Recommends Amendments to Lawful Access Act (Bill C-22)
The Privacy Commissioner of Canada appeared before the Standing Senate Committee on National Security, Defence and Veterans Affairs to discuss Bill C-22, the Lawful Access Act, 2026. The Commissioner recommended targeted amendments to ensure an appropriate balance between law enforcement, national security, and the fundamental right to privacy. This intervention aims to shape the legal framework for data access and protection.
Copyright Board Publishes New Tariffs for Streaming and Classical Music
The Copyright Board of Canada has published new tariffs for Re:Sound (Tariff 1.B) covering non-commercial radio, simulcasting, and various forms of streaming for the period 2020-2029. Additionally, new tariffs for SOCAN (Tariff 4.B) for classical music concerts for 2025-2027 have been released. These tariffs establish the royalties payable for the public performance and communication of musical works and sound recordings, directly impacting copyright remuneration.
International Trade Tribunal Initiates Inquiry into File Archive Storage Services
The Canadian International Trade Tribunal (CITT) has initiated a notice of inquiry (File PR-2026-055) concerning file archive storage services. This inquiry will examine aspects related to the procurement of these services. Such investigations can impact how data storage is managed and procured, potentially touching upon data governance and security standards.
Privacy Regulators Urge Responsible AI Use in Health and Research
Federal, provincial, and territorial privacy commissioners and ombuds have issued a joint resolution advocating for the responsible development and deployment of AI systems in health care and research. They emphasize the need for legislation and regulations that balance innovation with the protection of personal health information and fundamental rights. The regulators also call for robust AI governance and accountability frameworks from developers, providers, and health agencies.
Privacy Commissioner Investigates Data Breach Involving Crime Stoppers Platform Provider
The Office of the Privacy Commissioner of Canada (OPC) has launched an investigation into Navigate360, the commercial entity managing the tip platform for Crime Stoppers. This investigation follows a cybersecurity incident and will assess the security safeguards in place under Canada's federal private-sector privacy law, PIPEDA. The OPC's focus is on addressing the breach and preventing future incidents, underscoring the importance of data protection.
Privacy Commissioner Submits Recommendations on AI Transparency
The Office of the Privacy Commissioner of Canada (OPC) has submitted its response to Innovation, Science, and Economic Development Canada's (ISED) discussion paper on enhancing trust in AI through increased transparency. The OPC concurs with ISED's identified areas of concern, including AI-generated content and information about AI systems. This submission emphasizes transparency as crucial for building public trust and promoting responsible innovation in AI.
Privacy Commissioner updates guidance on handling biometric voice data from customer calls
The Office of the Privacy Commissioner of Canada (OPC) has released updated guidance for organizations that record customer calls. This guidance specifically addresses the safe handling of biometric data, such as voiceprints, which are considered sensitive personal information. It clarifies the conditions under which meaningful consent is required for collecting these unique voice characteristics, aligning with best practices under the Personal Information Protection and Electronic Documents Act (PIPEDA).
Canadian International Trade Tribunal Initiates Inquiry into Information Technology Service Delivery
The Canadian International Trade Tribunal (CITT) has announced a new inquiry into information technology service delivery, published in the Canada Gazette, Part I. This inquiry, identified as File PR-2026-044, will examine trade practices and market conditions. While broad, such inquiries can involve the commercial value and protection of data within IT services, potentially impacting trade secrets or contractual data arrangements.
Canadian Bar Association Submits Recommendations on Advancing AI Transparency
The Canadian Bar Association (CBA) has issued a submission advocating for greater transparency in artificial intelligence (AI). The submission emphasizes the importance of transparency regarding AI-generated content to build public trust. It also cautions against a uniform approach to all AI uses in content creation, highlighting the nuanced considerations required for AI-specific rules and governance.
Parliament Resumes Consideration of Bill C-36 to Replace Federal Privacy Law and Introduce AI Privacy Rules
Canada's Parliament has reconvened, bringing Bill C-36 back onto the legislative agenda for further consideration. This proposed legislation aims to replace the Personal Information Protection and Electronic Documents Act (PIPEDA) with the Protecting Privacy and Consumer Data Act, introducing stricter privacy rules and significant penalties. The bill also includes new provisions related to AI privacy, impacting how personal data is collected, used, and disclosed in commercial activities.
Inter-jurisdictional Regulators Discuss Data Governance, AI, and Emerging Technologies
Federal, provincial, and territorial privacy and information commissioners convened to address the implications of rapid technological change on data protection. Discussions focused on the opportunities and risks presented by AI, quantum computing, and advanced data processing systems. Regulators also explored how privacy intersects with cross-border data flows and digital sovereignty, emphasizing the need for collaboration to foster public trust and responsible innovation in the data-driven economy.
Privacy Commissioner Issues Guidance on Third-Party Data Handling and Accountability
The Privacy Commissioner of Canada has released new guidance for businesses on managing personal information when working with third-party service providers. This guidance, open for public comment until December 4, 2026, outlines best practices for assessing privacy risks, informing contractual terms, and demonstrating accountability under PIPEDA. It emphasizes that organizations remain responsible for personal information under their control, even when processed by third parties.
Canadian International Trade Tribunal Initiates Inquiry into Automated Data Processing Software
The Canada Gazette announced a preliminary injury inquiry by the Canadian International Trade Tribunal (CITT) concerning automated data processing software. This inquiry, designated PI-2026-003, will assess potential injury to domestic industries. Such proceedings can highlight the economic value and competitive aspects of software and the data it processes, implicating unfair competition considerations.
OPC files Federal Court application to enforce Google de-listing recommendations
The Office of the Privacy Commissioner of Canada (OPC) has filed an application with the Federal Court. This action seeks to enforce the OPC's recommendations from an investigation into Google, which concluded that Canadians have a limited right to have certain information de-listed from online search results. The Commissioner is seeking a binding order as current privacy law does not grant this authority directly.
Privacy Commissioner Submits Recommendations on Proposed Consumer-Driven Banking Regulations
The Office of the Privacy Commissioner of Canada (OPC) provided feedback to Finance Canada on the proposed Consumer-Driven Banking Regulations. The OPC supports the regime's goals for consumer privacy and data control, including provisions for data direction, breach reporting, and multi-factor authentication. The submission also suggests enhancements, such as clearer information for consumers, stricter limits on consent exceptions for public data, and robust security safeguards for participating entities.
Copyright Board publishes updated SOCAN tariffs for motion picture theatres
The Canada Gazette announced the publication of updated tariffs by the Copyright Board for the Society of Composers, Authors and Music Publishers of Canada (SOCAN). These tariffs specifically apply to motion picture theatres for the periods of 2017-2024 and 2025-2027. This update clarifies the licensing fees for the use of copyrighted musical works in a commercial setting.
Commons Heritage Committee urges opt-in consent and transparency for AI training on copyrighted works
In April 2026 the House of Commons Standing Committee on Canadian Heritage presented its report on the impacts of artificial intelligence on the creative industries, with 13 recommendations. These include requiring clear labelling of AI-generated content, ensuring the Copyright Act applies to AI outputs, imposing transparency obligations on AI developers about the copyrighted material in their training data, and establishing an opt-in consent requirement before protected works can be used to train AI systems. The report feeds into the government's pending decision on a text-and-data-mining framework following its 2023-2024 copyright consultation.
CanLII and Caseway AI settle landmark database-scraping copyright suit
On March 20, 2026 the Canadian Legal Information Institute announced it had resolved all matters in its British Columbia Supreme Court proceeding (VLC-S-S-247574) against AI startup Caseway. CanLII had alleged the bulk, systematic download of over 120 GB and about 3.5 million records from its curated case-law database to build a competing AI legal tool. The confidential settlement means Canadian courts did not rule on whether compiled public legal information attracts enforceable database rights, leaving the scope of protection for curated datasets untested.