LIVE
EU AI Act enforcement begins · June 2026NIST AI RMF — risk management framework publishedISO/IEC 42001 AI management standard now certifiableOpenAI o3 sets new reasoning benchmarksAnthropic raises $4B Series EEU AI Act enforcement begins · June 2026NIST AI RMF — risk management framework publishedISO/IEC 42001 AI management standard now certifiableOpenAI o3 sets new reasoning benchmarksAnthropic raises $4B Series EEU AI Act enforcement begins · June 2026NIST AI RMF — risk management framework publishedISO/IEC 42001 AI management standard now certifiableOpenAI o3 sets new reasoning benchmarksAnthropic raises $4B Series E

Canada Artificial Intelligence and Data Act

Proposed
high risk
Canada

Proposed AI and Data Commissioner (Minister of Innovation, Science and Industry oversight). ISED (Innovation, Science and Economic Development Canada).

Proposed 2024-2025 (pending Parliamentary approval as of 2024)

Official Text

Status

Proposed

Risk Level

High

Jurisdiction

Canada

Enforcement

Proposed 2024-2025 (pending Parliamentary approval as of 2024)

high risk framework

Organizations in Canada developing, deploying, or making available high-impact AI systems.

Overview

The Artificial Intelligence and Data Act (AIDA) is Canada's proposed federal AI regulation, introduced as Part 3 of Bill C-27 (alongside updates to PIPEDA). Risk-based approach similar to the EU AI Act. A proposed AI and Data Commissioner would have oversight, investigative, and order-making powers.

Scope

Organizations in Canada developing, deploying, or making available high-impact AI systems. Foreign companies serving Canadian users may be covered depending on final text.

Applicability

Who Is Affected

  • Canadian organizations developing or deploying high-impact AI systems
  • Foreign companies making high-impact AI available to Canadian users
  • Regulated industries (financial services, healthcare, transportation) using high-impact AI

Key Prohibitions

  • AI systems designed with the explicit purpose of causing serious harm
  • Reckless deployment of AI systems with foreseeable catastrophic risk
  • Fraud and deception using AI systems
  • Processing biometric data to infer protected characteristics without legal basis

Key Requirements

  • Identify and mitigate risks for high-impact AI systems before deployment
  • Establish accountability frameworks: designate a responsible person for high-impact AI
  • Transparency to affected individuals about AI decision-making processes
  • Record-keeping and auditing requirements for high-impact AI systems
  • Report serious harms caused by AI systems to the Commissioner
  • Publish plain-language descriptions of high-impact AI systems
  • International data transfer protections for AI training data
  • Prohibition on AI designed to cause harm or catastrophic recklessness

Implementation Guidance

  1. 1Monitor legislative progress of Bill C-27 and any amendments
  2. 2Begin inventory of high-impact AI systems now to prepare for compliance
  3. 3Cross-reference with NIST AI RMF for early-stage compliance framework
  4. 4Consult Canadian legal counsel on proposed scope of obligations
  5. 5Engage with ISED public consultations on proposed regulations

Industry Impact

Financial Services

Credit, insurance, and employment AI likely classified as high-impact. AIDA compliance builds on existing OSFI model risk guidance.

high

Healthcare

AI in diagnosis, treatment, and patient management will be high-impact. Health Canada coordination anticipated.

critical

HR & Employment

Hiring and workforce management AI expected to be high-impact - transparency and human oversight required.

high

Government

Public sector AI use is directly addressed. Government must lead by example.

high

Technology

AI developers must classify their systems against high-impact criteria. Compliance infrastructure investment needed.

medium

Regulatory Timeline

PastCurrentUpcoming

Jun 2022

Bill C-27 (including AIDA) introduced in Parliament

2023–2024

Parliamentary committee hearings; significant amendments proposed

2024

Bill C-27 debate ongoing; AIDA may be separated for faster passage

2025–2026

AIDA passage anticipated; regulations would follow 12–18 months later

Penalties for Non-Compliance

Proposed: up to CAD $25M or 5% of global revenues for serious violations; administrative penalties up to CAD $10M for procedural non-compliance

Framework Details

Short Name

AIDA

Jurisdiction

Canada

Enforcement Date

Proposed 2024-2025 (pending Parliamentary approval as of 2024)

Enforcing Authority

Proposed AI and Data Commissioner (Minister of Innovation, Science and Industry oversight). ISED (Innovation, Science and Economic Development Canada).

Status

Proposed

Risk Level

high

Affected Organizations

Organizations in Canada developing, deploying, or making available high-impact AI systems.

Tags

CanadaProposedEnterpriseGovernmentRegulation

This is educational guidance only. Always consult qualified legal counsel for compliance decisions affecting your organization.