An icon of an eye to tell to indicate you can view the content by clicking
Signal
Original article date: Aug 20, 2026

Canada AI Strategy 2026: No Omnibus Law, Targeted Rules Instead

August 20, 2026
5 min read

Canada Signals a New Direction for AI Governance: Targeted Rules Instead of a Single Statute

Canada quietly set aside one of the most-watched AI bills on its legislative calendar. On June 4, 2026, the federal government released AI for All, a five-year national AI strategy that formally sidelines the Artificial Intelligence and Data Act (AIDA) in favor of a more targeted approach to AI regulation.

That shift has direct implications for any organization operating in or selling into Canada.

Key Takeaways

  • No new omnibus AI law. Canada is not adopting an EU AI Act equivalent. AI obligations will instead flow through privacy law reform (Bill C-36), online safety legislation (Bill C-34), procurement policy, standards, and sector-specific regulators.
  • Privacy reform is the primary trust mechanism. Bill C-36 would replace PIPEDA with the Protecting Privacy and Consumer Data Act (PPCDA), strengthening consent requirements, adding protections for children's data, and aligning with international privacy standards.
  • Online safety becomes an AI governance tool. Bill C-34 (the Safe Social Media Act) would impose obligations on AI chatbot services covering harmful content, crisis intervention, and user reporting — overlapping with what AIDA once contemplated.
  • Sovereignty and growth are twin goals. The strategy prioritizes domestic compute infrastructure, Canadian AI companies, and AI literacy, treating economic competitiveness and public trust as complementary objectives.

What This Means for Organizations

The absence of AIDA creates flexibility to build risk-based AI governance programs aligned to actual use cases. But the targeted approach means compliance obligations will arrive from multiple directions simultaneously. Organizations should map current AI deployments against privacy reform, online safety legislation, and sector-specific rules rather than waiting for a single compliance trigger.

Read the full article on Fasken