Canada's Digital Charter
Canada · Guideline · Innovation, Science and Economic Development Canada
Our summary
A set of ten principles guiding Canada's approach to the digital economy, addressing privacy, security, data control and responsibility. The principles aim to establish confidence among citizens and businesses in digital services while enabling innovation and economic growth. Supporting legislation through Bill C-27 proposes stronger privacy protections and AI governance rules.
Written by the Index in our own words. It is not legal advice; the official text is the authority.
Inside this policy
Every section of this policy in order. Our notes summarise each one in plain language and do not quote the official text, which is the authority.
Drafted by the Index An automated summary of the official text, not yet reviewed by a person.Reviewed Checked by a person against the official text.
17 sections
Jump to a chapter
Language selection
WxT Search form
Building a foundation of trust
The Government of Canada aims to enable Canadians to benefit from digital technology while protecting their privacy and data from misuse, and requiring organizations to communicate transparently. The Charter establishes principles ensuring privacy protection, human-centred data-driven innovation, and leadership in responsible digital economy practices.
Bill C-27: Digital Charter Implementation Act, 2022
1 section
The proposed legislation modernizes personal information protection in the private sector and introduces rules for responsible artificial intelligence development and deployment. It grants Canadians greater control over their information, enables data portability, allows deletion of unnecessary data, establishes substantial penalties for privacy violations, and requires companies to meet high standards when building and using AI systems.
Further information
The 10 principles of the Charter
10 sections
The Charter comprises ten principles addressing universal digital access, online safety, individual control over personal information, data transparency and portability, modern government services, competitive fairness, beneficial use of data, democratic strength, freedom from harmful content, and effective enforcement mechanisms.
1 Universal Access
All Canadians should have equal opportunity to participate in digital activities through access to necessary infrastructure, connectivity, education and skills development.
2 Safety and Security
Canadians should be able to depend on digital services for reliable, trustworthy and secure interactions and have confidence in their online safety.
3 Control and Consent
Canadians should govern what personal information they share, who accesses it and how it is used, with assurance that their privacy remains protected.
4 Transparency, Portability and Interoperability
Canadians should readily access their personal information and be able to move or share it between organizations without significant obstacles.
5 Open and Modern Digital Government
Canadians should be able to use secure and user-friendly digital services provided by the Government of Canada.
6 A Level Playing Field
The government commits to maintaining fair competition in digital markets to support Canadian business development and innovation leadership, while guarding consumers against exploitative practices.
7 Data and Digital for Good
The government will promote responsible data practices that generate beneficial outcomes, encourage transparency, and enhance wellbeing for people in Canada and globally.
8 Strong Democracy
The government will uphold freedom of speech and safeguard democratic processes by countering false information and online attacks targeting electoral integrity and democratic systems.
9 Free from Hate and Violent Extremism
Digital platforms should not allow hateful content, violent extremism, or illegal material to be promoted or shared on their services.
10 Strong Enforcement and Real Accountability
Substantial and enforceable penalties will apply to breaches of laws and rules implementing these charter principles.
What we heard during the National Digital and Data Consultations
This charter rests on ten principles derived from consultations with over 550 Canadians held between June and October 2018, through roundtable discussions and online submissions.
Controls
What this policy requires, forbids, grants or penalises, one control at a time and in our own words. Each control links to the official text, which is the authority. This is not legal advice.
Drafted by the Index Drafted automatically from the official text, not yet reviewed by a person.Reviewed Checked by a person against the official text.
Themes covered 9 of 35
Choose a theme to see only its controls. About the themes
Risk and scope 1 of 4
- Risk classification, not covered
- Risk management system, not covered
- Impact assessment, not covered
Data and privacy 2 of 4
- Cross-border data transfer, not covered
- Copyright and training data, not covered
Transparency and records 1 of 4
- Labelling of synthetic content, not covered
- Technical documentation, not covered
- Record keeping and logging, not covered
Technical safeguards 1 of 4
- Human oversight, not covered
- Bias and non-discrimination, not covered
- Testing and evaluation, not covered
Assurance and lifecycle 0 of 4
- Conformity assessment and certification, not covered
- Registration and notification, not covered
- Incident and breach reporting, not covered
- Post-market monitoring and corrective action, not covered
Rights and protected groups 0 of 4
- Automated decision-making rights, not covered
- Children and vulnerable groups, not covered
- Biometric identification and surveillance, not covered
- Whistleblowing, complaints and redress, not covered
Roles and organisation 3 of 6
- Supply chain and provider-deployer duties, not covered
- General purpose and foundation models, not covered
- Innovation support and sandboxes, not covered
Enforcement and sectors 1 of 5
- Sector rules: health, not covered
- Sector rules: finance and insurance, not covered
- Sector rules: employment, not covered
- Sector rules: education, not covered
The full list of controls could not be loaded, so only the first 14 are shown.
Building a foundation of trust 4 controls
- ObligationApplies to: Public authorityDrafted by the Index
The government of Canada commits to enabling Canadians to benefit from digital technology while protecting their privacy and data from misuse.
- ObligationApplies to: Public authorityDrafted by the Index
The government of Canada commits to ensuring organizations communicate transparently and simply with users about data practices.
- ObligationApplies to: ProviderDrafted by the Index
Organizations must protect personal information, including that of children, from misuse.
- ObligationApplies to: ProviderDrafted by the Index
Organizations must communicate simply and straightforwardly with users about how they handle personal data.
1 1 control
- ObligationApplies to: Public authorityDrafted by the Index
All Canadians should have equal opportunity to participate in digital activities through access to necessary infrastructure, connectivity, education and skills development.
2 1 control
- RightApplies to: OthersDrafted by the Index
Canadians should be able to depend on digital services delivering reliable, trustworthy and secure interactions.
3 1 control
- RightApplies to: OthersDrafted by the Index
Canadians should govern the personal information they share, decide who accesses it and for what purposes.
4 1 control
- RightApplies to: OthersDrafted by the Index
Canadians should readily access their personal information and be free to share or transfer it between organizations without undue burden.
5 1 control
- ObligationApplies to: Public authorityDrafted by the Index
The public authority should provide digital services to Canadians that offer security and ease of use.
6 1 control
- ObligationApplies to: Public authorityDrafted by the Index
The government will maintain fair competition in digital markets to support the growth of Canadian businesses and innovation while protecting consumers from exploitative practices.
7 1 control
- ObligationApplies to: Public authorityDrafted by the Index
The government will promote the ethical use of data to generate value, encourage transparency and improve the wellbeing of people domestically and internationally.
8 1 control
- ObligationApplies to: Public authorityDrafted by the Index
The government will protect freedom of expression and counter online threats and disinformation that are designed to undermine elections and democratic institutions.
9 1 control
- ProhibitionApplies to: OthersDrafted by the Index
Digital platforms should not allow hateful content, violent extremism or criminal material to be promoted or shared through their services.
10 1 control
- ObligationApplies to: Public authorityDrafted by the Index
Public authorities must establish clear and meaningful penalties for breaches of laws and regulations implementing the Charter's principles.
Change history
No changes recorded since we began monitoring this policy.