Canada Artificial Intelligence and Data Act (Companion document)

• Authority: Government of Canada
• Jurisdiction: Other countries
• Collections: Miscellaneous documents
• Most recent activity: Proposed
• Most recent activity date: 2022-06-16

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• Unfair discrimination and misrepresentation
• Unequal performance across groups
• Cyberattacks, weapon development or use
• Fraud, scams, and targeted manipulation
• Governance failure
• Lack of capability or robustness
• Lack of transparency or interpretability

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Exposure to toxic content
• Compromise of privacy
• AI system security vulnerabilities
• False or misleading information
• Disinformation, surveillance, and influence at scale
• Overreliance and unsafe use
• Loss of human agency and autonomy
• Competitive dynamics
• AI pursuing its own goals

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has good coverage of approximately 10-12 subdomains, with strong focus on discrimination and bias (1.1, 1.3), privacy violations (2.1), security vulnerabilities (2.2), misinformation (3.1), malicious uses (4.1, 4.2, 4.3), overreliance (5.1), loss of agency (5.2), governance structures (6.5), and AI system failures (7.1, 7.3, 7.4). Coverage is concentrated in discrimination/toxicity, malicious actors, human-computer interaction, and AI system safety domains.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Finance & Insurance
• Health Care & Social Assistance

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Agriculture, Mining, Construction & Manufacturing
• Trade, Transportation & Utilities
• Information
• Professional & Technical Services
• Scientific Research & Development Services
• Management, Administrative & Support Services
• Public Administration (excl. National Security)

All other sectors had no coverage in this document.

Sectors Summary

This is a horizontal regulatory framework that applies across all economic sectors where high-impact AI systems are used in international and interprovincial trade and commerce. The document explicitly mentions healthcare, finance, employment/hiring, and autonomous vehicles as key application areas, but is designed to govern AI use broadly across the Canadian economy.

Legislative Status

Hard Law

Legislative Status Summary

This is a proposed binding legal instrument with enforcement mechanisms including criminal offences, regulatory offences, administrative monetary penalties, and ministerial powers to order cessation of use. The document uses mandatory language throughout and establishes clear legal obligations for businesses conducting regulated activities.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Summary: The document explicitly states that the Government of Canada tabled AIDA as part of Bill C-27 in June 2022, with ISED responsible for developing the regulatory framework.

Target

• Entity Types: AI_Developer, AI_Deployer
• Summary: The document clearly identifies businesses involved in the lifecycle of high-impact AI systems as the primary targets, with specific obligations for those who design, develop, make available, or manage operations of such systems.

Enforcer

• Entity Types: AI_Governance_Actor
• Summary: The document establishes a multi-layered enforcement structure with the Minister having primary administrative and enforcement authority, supported by a new AI and Data Commissioner, with criminal matters handled by PPSC and law enforcement.

Monitor

• Entity Types: AI_Governance_Actor
• Summary: The document establishes the AI and Data Commissioner as the primary monitoring body, with support from external experts, independent auditors, and an advisory committee. The Commissioner would track systemic effects and coordinate with other regulators.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design
• Collect and Process Data
• Build and Use Model
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document comprehensively covers all six AI lifecycle stages, with particularly detailed coverage of Design, Development, Deployment, and Operation/Monitoring stages. It explicitly maps regulatory obligations to each lifecycle stage and provides detailed requirements for businesses at each point in the AI system lifecycle.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Models
• AI Systems
• General Purpose AI
• Open Weight / Open Source

Technical Scope Summary

The document explicitly mentions AI systems and AI models as distinct concepts. It does not use the terms frontier AI, general purpose AI, foundation models, generative AI, predictive AI, or open-weight/open-source models. It does not specify compute thresholds. The focus is on 'high-impact AI systems' defined by risk criteria rather than technical characteristics.