Editor's note: The IAPP is policy neutral. We publish contributed opinion and analysis pieces to enable our members to hear a broad spectrum of views in our domains.
Canadian friends and colleagues who attended the IAPP Global Privacy Summit 2025 shared some intriguing observations about how geopolitical issues are shaping many discussions — and impacting — our field.
As always, there's no doubt the IAPP put on a stellar event in Washington, D.C., and attendees were thrilled with the content and the opportunity to connect with colleagues from around the world — maybe even now more than ever. Beyond excellent sessions and networking, it sounds like some conversations also included growing concerns about recent developments and their implications. How could they not?
Renewed suggestions, for example, about Canada potentially becoming part of the U.S. have many Canadians reconsidering traditional approaches to cross-border data sharing and privacy protection, similar to how some are changing their buying habits. There seems to be a growing awareness of the need to safeguard Canadians' personal data in this shifting global environment. Heck, even my local, third-generation butcher is adapting, replacing my favorite U.S.-brand martini olives with products sourced elsewhere.
These issues are clearly permeating the minds of many Canadians, prompting active discussions among policymakers and legal experts about potential strategies to better protect personal data. I've personally been involved in or have heard from colleagues about these conversations, exploring new approaches in response to evolving concerns. Here's a quick overview of some ideas currently being explored.
Blocking statutes against foreign data demands. Proposals are underway to establish legal protections penalizing companies in Canada that disclose personal data to foreign governments without explicit Canadian authorization.
Strengthening domestic privacy laws. Critics argue Canada's Personal Information Protection and Electronic Documents Act requires enhancements to address insufficient penalties for violations. Proposed reforms include:
• Clearly defining rules for domestic storage of sensitive data.
• Increasing transparency in cross-border data transfers.
• Improving oversight of foreign-owned subsidiaries managing Canadian data.
Sovereign cloud infrastructure. There's growing advocacy for publicly funded, Canadian-owned cloud storage and artificial intelligence platforms to reduce risks associated with foreign legislation like the U.S. CLOUD Act.
Modernizing cross-border data agreements. Revising mutual legal assistance treaties to close gaps and safeguard Canadian privacy standards by:
• Ensuring judicial oversight for cross-border data access.
• Restricting bulk data collection and surveillance practices.
• Preventing reuse of data beyond its original purpose.
Leveraging AI regulation leadership. Canada could enhance its international standing by:
• Implementing rigorous AI safety standards, particularly in health care and other public sectors.
• Mandating "privacy-by-design" principles in government-funded AI projects.
• Creating certification frameworks for ethically developed AI models.
These policy considerations underscore the urgency felt within parts of Canada's data-protection community about navigating the complexities posed by current geopolitical shifts. And conversations around these strategies can lead to actions that may significantly shape our country's privacy landscape in the coming years.
Additionally, with a federal election just days away, Canada's approach to privacy could further evolve based on election results. All our major political parties recognize privacy as important, although their specific approaches may vary — from legislative reform and economic considerations to enhancing digital rights for citizens.
The important thing is, whatever your views, everyone's voice counts. Be sure to exercise your right to vote.
Kris Klein, CIPP/C, CIPM, FIP, is the managing director for Canada for the IAPP.
This article originally appeared in the Canada Dashboard Digest, a free weekly IAPP newsletter. Subscriptions to this and other IAPP newsletters can be found here.
