Know where federal privacy
reform really stands
Bill C-27 died on the order paper when Parliament was prorogued on January 6, 2025, and will never come into force. Its successor, Bill C-36, the Protecting Privacy and Consumer Data Act, was tabled on June 15, 2026 and is at second reading in the House of Commons. It is not law. PIPEDA remains the federal privacy law today.
Law 25 administrative monetary penalty — or 2% of worldwide turnover
1 Quebec Law 25
Start Free Assessment| Processing Activity | Legal Basis | Data Categories | Retention |
|---|---|---|---|
| Customer Onboarding | Contract | Name, Email, ID | 7 years |
| Email Marketing | Consent | Email, Preferences | Until withdrawal |
| Analytics | Legitimate | Usage, Device | 2 years |
| HR Processing | Contract | SIN, Banking | 7 years |
Find personal data you didn't know you had.
Canuckt's discovery engine scans your connected systems — CRM, cloud storage, email, databases — and surfaces personal information flows you didn't know existed. Average businesses find 3.5× more PII than expected.
Request a demoAutomated Records of Processing Activities.
Law 25 and PIPEDA require documented data inventories. Valdra automatically maintains your ROPA as your systems change — new integrations, new vendors, new data types are detected and logged.
Request a demoAdditional features
Request a demoBill C-27 History
The full parliamentary timeline of Bill C-27, from first reading to the day it died, so your team stops planning for a law that will never arrive.
Bill C-36 Status
Bill C-36 is at second reading in the House of Commons. Valdra shows it as a proposal, never as law, and it does not create a Tribunal.
Reform Readiness Score
A projected readiness score built from your PIPEDA assessment plus the new obligations federal reform would add. Advisory until a bill is in force.
Proposed Penalties, Labelled
Bill C-36 proposes administrative penalties up to the higher of $10M or 3% of gross global revenue, and offence fines up to the higher of $25M or 5%. Not law.
AIDA Status
The Artificial Intelligence and Data Act died with Bill C-27 in January 2025. Canada has no federal AI statute in force.
Learn more about Valdra
Get compliant and build trust
Start free, no credit card.
🍁 Canadian data residency · PIPEDA readiness · SOC 2 in progress
