Canada: Budget Implementation Act including provisions establishing data mobility framework passed first reading

On 18 November 2025, the Budget Implementation Act (Bill C-15) passed its first reading in the House of Commons. Division 23 of Part 5 of the Act updates the Personal Information Protection and Electronic Documents Act by creating a data mobility framework. The framework requires organisations, subject to regulations, to share the personal information they have collected about an individual with another organisation chosen by that individual, provided both organisations follow the data mobility framework. The Governor in Council is authorised to set rules governing how this information is disclosed, including safeguards for security, technical standards to ensure systems can work together, which organisations are covered, exceptions for confidential business information, and distinctions between different types of activities, information, or organisations. The amendments also change existing complaint and enforcement processes, allowing individuals to file complaints if organisations fail to comply or ignore recommendations from the Commissioner, and permitting applications to the Court concerning matters raised in the Commissioner’s report or relevant provisions. Overall, these changes give individuals greater control over their personal information while ensuring secure and regulated sharing between organisations.