Source: Blakes

As of May 2026, Quebec is the only Canadian jurisdiction that explicitly includes a right of data portability for individuals under its Act respecting the protection of personal information in the private sector. This law permits individuals to request that computerized personal information collected from them be transferred in a structured, commonly used format either to themselves or to another authorized person. This mirrors the right of data portability under Article 20 of the European Union’s GDPR.

On March 26, 2026, Bill C-15 (Budget 2025 Implementation Act, No. 1) received Royal Assent, amending the federal Personal Information Protection and Electronic Documents Act (PIPEDA) to allow the federal government to establish “data mobility frameworks.” The Governor in Council may, after consulting the Office of the Privacy Commissioner of Canada (OPC), make regulations that prescribe which organizations are subject to a framework, the safeguards required to securely disclose and collect personal information, and technical parameters to ensure interoperability. These frameworks will enable individuals to request that organizations transfer personal information directly to other designated organizations participating in such government-designated frameworks, primarily to facilitate “open banking.” However, these amendments do not create as broad a right of data portability as Quebec’s legislation or the EU GDPR.