Canada AI Regulation & AIDA (Bill C-27): What Businesses Need to Know
Updated 2026-10-15
AIDA was proposed inside Bill C-27, but the bill died when Parliament was prorogued in January 2025, so Canada has no federal AI-specific statute in force. Privacy laws (PIPEDA, Quebec Law 25), human-rights and consumer-protection law, and the federal voluntary code for generative AI still apply to AI use today.
What already applies
Even without AIDA, Canadian organisations using AI must respect:
- PIPEDA and provincial privacy laws for personal data used in AI systems
- Quebec Law 25, including notice requirements for automated decisions
- Human-rights law on discriminatory outcomes
- Treasury Board's Directive on Automated Decision-Making for federal institutions
- The voluntary Code of Conduct on advanced generative AI systems
Building a governance program
Practical steps: inventory where AI is used, rank systems by risk, document data sources, add human review for high-impact decisions, and train the people who buy and operate AI tools.
International frameworks such as ISO/IEC 42001 and the NIST AI RMF give a structure you can adopt now and adapt when Canadian legislation returns.
Training your team
Our AI Governance program covers risk assessment, policy writing and audit evidence. Every Altaris program is $399 CAD one-time, self-paced, with lifetime access and a 30-day money-back guarantee.
Related programs
- Diploma in AI Governance & Product$399 CAD · self-paced
- Diploma in AI Security & Cyber Risk$399 CAD · self-paced
- Diploma in AI Leadership & Strategy$399 CAD · self-paced
Training a team? Seats are $199 each · Not ready? Try the free 7-day course
Common questions
- Is AIDA law?
- No. It was part of Bill C-27, which ended with prorogation in January 2025. Watch for new federal legislation.
- Does Quebec regulate AI?
- Quebec Law 25 sets rules on automated decision-making and personal information that affect many AI uses.