Bill C-15 (An Act to implement certain provisions of the budget tabled in Parliament)
On March 26, 2026, Bill C-15 (An Act to implement certain provisions of the budget tabled in Parliament on November 4, 2025) received Royal Assent and became law (https://www.parl.ca/DocumentViewer/en/45-1/bill/C-15/royal-assent?utm_source=chatgpt.com) This Act is not a standalone privacy legislation, but it contains amendments to the Canadian Federal privacy legislation, the Personal Information Protection and Electronic Documents Act (PIPEDA).
The Act introduced the data mobility right, as one of the rights and individual has to the personal information and organization holds about them.
The data mobility right requires an organization to disclose personal information it holds about an individual to another organization at the individual’s request.
This data mobility aligns with global trends like the GDPR and Quebec Law 25 data portability right. The right applies where both organizations are subject to a data mobility framework. The Act also gives the government the power to make regulation, prescribe frameworks and set technical and security requirements for the protection of personal information.
The data mobility right is not yet fully operational, as the government is yet to make the regulation and prescribe the frameworks.
At Mocross & Olive Law Professional Corporation, we are committed to providing practical guidance to our corporate clients in complying with their obligations under the privacy legislations, including but not limited to the fulfillment of the newly introduced data mobility rights. Also, we advise our individual clients with respect to the exercise of their rights under the privacy legislations, including the data mobility rights introduced by the Act.
We continue to monitor developments related to the regulations and frameworks to be made by the government, and ensure clients' compliance with the requirements.