On June 15, 2026, the Government of Canada introduced Bill C-36, the Protecting Privacy and Consumer Data Act (PPCDA), as the successor to the Consumer Privacy Protection Act (CPPA) previously proposed under Bill C-27. The PPCDA would overhaul Canada’s federal private-sector privacy framework, replacing the Personal Information Protection and Electronic Documents Act (PIPEDA) with a modernized statute.

While the PPCDA carries forward much of the CPPA’s structure and substance, it introduces a number of significant changes, including a new regulator named the Digital Safety and Data Protection Commission of Canada, expanded definitions, stronger cross-border transfer requirements, and a consolidated enforcement model that replaces the proposed Tribunal under Bill C-27.

The accompanying table provides a detailed, article-by-article comparison of the PPCDA and the CPPA, and is intended to help readers easily identify and understand what has changed between the two bills. Where applicable, select corresponding provisions from PIPEDA have also been included for reference and comparison purposes.