No Canadian statute regulates artificial intelligence as a whole, so the rules that apply come from privacy laws, a federal policy for government departments, a few provincial measures, and voluntary guidance from regulators. This guide tracks each of them, states what is binding, and gives the status as of October 31, 2026 with the source behind it.
Key takeaways
- The federal Artificial Intelligence and Data Act lapsed with Bill C-27 in January 2025 and has not been replaced.
- Bill C-36, a privacy bill with rules on automated decision systems, has had first reading only.
- Quebec already requires notice and review when a decision rests only on automated processing, and Ontario requires AI disclosure in some job postings.
- Federal and provincial privacy regulators apply existing privacy law to AI systems, and their findings are the closest thing to case law.
Status board, October 31, 2026
| Measure | Status | Where it is explained |
|---|---|---|
| Artificial Intelligence and Data Act (Bill C-27) | Lapsed on January 6, 2025; no replacement bill | Timeline |
| Bill C-36, Protecting Privacy and Consumer Data Act | First reading on June 15, 2026; not passed | Bill C-36 |
| PIPEDA | In force; applied to AI by the federal Privacy Commissioner | PIPEDA and AI |
| Quebec Law 25, automated decision notice | In force; general entry into force date September 22, 2023 | Quebec Law 25 |
| Ontario Enhancing Digital Security and Trust Act, 2024 | Sections 1 to 16 in force since January 29, 2025; no AI-specific regulation found | Ontario rules |
| Ontario AI disclosure in job postings | In force for postings made on or after January 1, 2026, for employers with 25 or more employees | Ontario rules |
| Other provinces and territories | No general AI statute in force; narrow rules in Alberta and Manitoba | Province table |
Each linked page names the date it was last verified and flags points that official sources do not settle. This guide is general information, not legal advice.
Start here
These three pages give the overall picture before the detail: the current state of federal and provincial law, a dated chronology, and a map of who enforces what.
- Canada AI Regulation: Where Federal and Provincial Law Stand
- Canada AI Law Timeline: From AIDA to Bill C-36
- Who Regulates AI in Canada: Federal, Provincial, Voluntary Rules
Federal rules
The federal level has one pending bill and one long-standing privacy statute that regulators already apply to AI. The pages below read the bill text and the regulators' findings.
- Bill C-36 and Automated Decision Systems in Canada
- How PIPEDA Already Applies to AI Systems in Canada
Provinces
Provincial measures are narrow and differ in form: a notice duty for automated decisions in Quebec, a framework for the public sector in Ontario, and limited provisions elsewhere.
- Quebec Law 25 and Automated Decisions: What the Act Requires
- Ontario's AI Rules: What Is Binding and What Is Voluntary
- AI Rules in Each Canadian Province and Territory
For organizations
A checklist ties each practical step for a small organization to the law or regulator guidance behind it.
Related guides on this site
- How Canada Regulates and Uses AI in Health Care
- AI in Hiring: What Ontario and New York City Require
- AI in Education Rules in 2026: US Policy, Ontario, and BC
- AI Policy and Ethics
FAQ
Does Canada have an AI law?
Not a general one. The Artificial Intelligence and Data Act died with Bill C-27 in January 2025. AI use is covered by privacy laws, sector rules, provincial measures, and a federal directive for government departments.
Which Canadian rules on automated decisions apply today?
The Treasury Board directive applies to federal institutions, and Quebec's private-sector privacy law requires notice and review for decisions made only by automated processing. Bill C-36 would add a federal duty, but it has not passed.
Is this guide legal advice?
No. It summarizes public sources as of the date shown on each page. A specific compliance question belongs with a lawyer or the text of the law itself.
Sources
- LEGISinfo bill tracker, Parliament of Canada, 2026
- Annual Report 2024-25, Office of the Privacy Commissioner of Canada, 2025
- Overview of Canada's National Artificial Intelligence Strategy, Innovation, Science and Economic Development Canada, 2026
- Directive on Automated Decision-Making, Treasury Board of Canada Secretariat, 2025
- Commission d'accès à l'information du Québec, guidance on Law 25, 2026
- Enhancing Digital Security and Trust Act, 2024, Government of Ontario, 2026
Last verified: October 2026