Firms could face 5% revenue fines for re-identifying data in Canada

Canada's proposed Protecting Privacy and Consumer Data Act would impose criminal fines up to C$25 million or 5% of gross global revenue on firms that knowingly re-identify anonymised data, fail to report breaches, or obstruct the privacy regulator. The bill also contains an administrative penalty tier with lower fines targeting compliance failures, but the criminal tier poses a much larger risk to companies dealing with consumer data once passed.

This Wire brief sits within Fusion42's coverage of Data & Analytics.