New privacy bill exposes wealth firms to steep data fines

New privacy bill exposes wealth firms to steep data fines

New privacy bill exposes wealth firms to steep data fines

https://www.wealthprofessional.ca/news/industry-news/new-federal-privacy-bill-exposes-wealth-firms-to-steep-data-fines/392752

Publish Date: 2026-06-17 17:42:00

Source Domain: www.wealthprofessional.ca

The penalties are the part to watch. The bill sets a maximum administrative penalty, for all contraventions found in a single investigation, of the greater of $10 million or 3 percent of an organization’s gross global revenue in the prior financial year. Separately, an organization that knowingly breaches certain provisions – or obstructs the Commissioner or the Commission – commits an offence. On indictment, the fine can reach the greater of $25 million or 5 percent of gross global revenue; on summary conviction, the greater of $20 million or 4 percent. 

The bill also opens a direct route for clients to sue. Once a contravention is established through the Commissioner, the courts, or a final decision, an affected individual has a cause of action against the organization for damages tied to the loss or injury they suffered. 

Day-to-day obligations are spelled out. Organizations must maintain a privacy management program, limit collection, obtain consent, and dispose of information no longer needed. They must report any breach of security safeguards to the Commission when it is reasonable to believe the breach creates a real risk of significant harm to an individual, and notify the people affected. 

One provision speaks directly to advisors worried about vulnerable clients. The act lets an organization disclose personal information, without consent, to a government institution or the individual’s next of kin or authorized representative when it has reasonable grounds to believe the person has been, is, or may be the victim of financial abuse – provided the disclosure is made solely to prevent or investigate that abuse. 

Enforcement would sit with a new Privacy and Consumer Data Division inside the renamed Digital Safety and Data Protection Commission of Canada. The bill also amends financial-sector statutes including the Bank Act, the Insurance Companies Act, the Trust and Loan Companies Act and the Cooperative…

Source