Philippe Dufresne seeks feedback on guidance for organizations under private-sector privacy law

The privacy commissioner’s office opened a consultation on format, presentation, and contents
Philippe Dufresne seeks feedback on guidance for organizations under private-sector privacy law

Privacy Commissioner of Canada Philippe Dufresne is seeking feedback on developing future guidance for organizations under the country’s federal private-sector privacy law.

In particular, the Office of the Privacy Commissioner of Canada is inviting commentary regarding the guidance’s format, presentation, and contents to optimize its effect and utility. The office is also sourcing input on its process of conducting guidance consultations.

The OPC is seeking feedback from the following:

  • Businesses, industry representatives, and trade associations
  • Civil society and not-for-profit organizations
  • Representatives of Indigenous communities
  • Legal and academic professionals

It is also inviting input from individuals, groups, associations, professionals, or organizations with relevant experience or expertise to obtain feedback from a range of perspectives given the effect of privacy issues on different parties.

“Hearing from stakeholders about our guidance processes will help my office gain insights into the challenges that organizations face when complying with privacy obligations. This consultation is an opportunity to help shape the way that future OPC guidance is developed, including how we engage with stakeholders,” Dufresne said in a statement. “I ultimately want to ensure that our processes are fair, effective, and responsive to diverse stakeholder perspectives.”

The consultation is aligned with Dufresne’s strategic priority to maximize privacy protection and promotion, as is the development of a quick guidance on key and emerging issues by engaging proactively with private- and public-sector organizations.

The consultation period ends on March 13, 2026. Input may be sent to [email protected].

The OPC must champion the awareness and understanding of privacy rights and responsibilities under the Personal Information Protection and Electronic Documents Act. The office has fulfilled this obligation through education, outreach, and written guidance to clarify the application of privacy laws and regulatory expectations, to determine best practices for privacy protection, and to outline key privacy risks.

Last month, the OPC conducted the Global Privacy Enforcement Network privacy sweep alongside over 30 data protection and privacy authorities worldwide.