Jurisdiction-specific data protection, defamation law, and removal process information for Canada. Last reviewed 2025.
Office of the Privacy Commissioner of Canada (OPC) at federal level; provincial commissioners in British Columbia, Alberta, and Quebec is the supervisory authority for data protection in Canada. Individuals can file erasure and data-related complaints directly with this authority.
Personal Information Protection and Electronic Documents Act (PIPEDA) federally; Quebec's Law 25 (Bill 64, fully in effect since September 2023)
Quebec's Law 25 introduced one of North America's strongest privacy regimes, including a right to data erasure and portability, requiring businesses to honour erasure requests within 30 days. The proposed federal Consumer Privacy Protection Act (CPPA/Bill C-27) would extend similar rights nationwide.
Canadian defamation law varies by province â primarily judge-made common law in English Canada, and codified under the Civil Code in Quebec. There is no "serious harm" threshold. Canadian courts have asserted jurisdiction over international defendants whose content is accessed in Canada.
The OPC investigates complaints under PIPEDA and can recommend remedies. Google Canada follows Google's global RTBF-equivalent process for delisting. Canadian courts can grant interim and permanent injunctions for defamatory online content.
Common Canadian sources requiring removal include CBC/Radio-Canada, Globe and Mail, Toronto Star, National Post, CTV News, Global News, and provincial news sites across all provinces.
Quebec's Law 25 is particularly significant â it requires businesses to obtain explicit consent for data collection, provide privacy impact assessments, and honour erasure requests within 30 days. This applies to any organisation processing data of Quebec-resident clients, regardless of where the organisation is based.