On 26 February 2026, the House of Commons passed the Budget Implementation Act (Bill C-15). Division 23 of Part 5 of the Bill would amend the Personal Information Protection and Electronic Documents Act to establish a data mobility framework. The amendments would apply to organisations subject to the Act that participate in a designated data mobility framework. The framework would require, subject to regulations, that an organisation disclose personal information collected from an individual to another organisation designated by the individual if both organisations are subject to a data mobility framework. The Governor in Council would, following consultation with the Office of the Privacy Commissioner, be empowered to establish regulations governing such disclosures. The regulations could specify safeguards for secure data handling and technical standards to ensure interoperability of systems used for the disclosure and collection of personal information.
Original source