Federal privacy commissioner supports introducing privacy rules for political parties

In a statement before the Standing Senate Committee on Legal and Constitutional Affairs, Philippe Dufresne, Canada’s privacy commissioner, discussed the privacy implications of Bill C-4, the Making Life More Affordable for Canadians Act, and made recommendations for its improvement. 

He noted that the Privacy Act, which applies to the federal government, and the Personal Information Protection and Electronic Documents Act (PIPEDA), which applies to private organizations, do not cover political parties, which collect highly sensitive personal information. 

“Canadian voters’ fundamental right to privacy should be protected with a privacy regime for political parties that goes beyond self-regulation; one that provides meaningful privacy standards; and that ensures independent oversight,” Dufresne said in his statement. 

According to him, political parties should be subject to privacy rules, which should parallel the requirements in federal legislation already applying to the public and private sectors, while reflecting the political parties’ unique role within the democratic process. 

Recommendations

In his statement to the committee, Dufresne recommended the following ways to amend Bill C-4 to improve the protection of the personal information of electors: 

1. Incorporate privacy standards that form the basic elements in data protection laws in Canada and worldwide 
2. Include privacy breach notification provisions 
3. Enable formal collaboration among the Office of the Privacy Commissioner of Canada (OPC), Elections Canada, and the Commissioner of Canada Elections to enhance oversight 

In connection with the first recommendation, Dufresne suggested requirements for political parties to: 

• Identify the purposes for collecting personal information 
• Seek consent where appropriate 
• Limit collection, use, and disclosure 
• Implement safeguards against privacy breaches 

He also suggested adding a mechanism for voters to access and correct their personal information in the custody of political parties. 

Regarding the second recommendation, Dufresne explained that requiring breach reports to impacted individuals and independent bodies such as the OPC, Elections Canada, and the Commissioner of Canada Elections would protect Canadians. 

In relation to the third recommendation, he noted that facilitating inter-agency cooperation would help regulators improve their work and tackle complex issues affecting multiple sectors and jurisdictions. 

Importance of privacy

In his statement to the committee, Dufresne stressed the importance of privacy to Canadians. He stated that privacy supports the public interest and improves trust in the country’s public institutions. 

“Privacy is a fundamental right that is directly linked to democracy itself,” Dufresne said. “Prioritizing privacy protects Canadians, it supports the Canadian economy and strengthens Canadian institutions.” 

Dufresne pointed to an OPC survey in 2025, which revealed that nine in 10 Canadians polled had concerns about the protection of their privacy. The survey also found that trust in the manner of handling of personal information was an important factor for individuals interacting with organizations.