This is Part 2 (see Part 1 here) of a two-part commentary describing some of the major substantive changes to Canada’s privacy law set out in Bill C-11 (the "Bill"), the Digital Charter Implementation Act, 2020. The Bill provides for the enactment of the Consumer Privacy Protection Act (the “CPPA”) together with the enactment of the Personal Information and Data Protection Tribunal Act (the “PIDPTA”).
Part 2 reviews the proposed requirements on organizations, the enforcement regime and penalties for non-compliance set out in the Bill.