Fix It Before C-36 Raises the Stakes

Timing is the whole argument here, so here it is plainly and without the drama. The best moment to fix something is before it becomes urgent. Right now, for most Canadian businesses, privacy is not urgent. That is exactly what makes right now a good time.

The rules are moving one direction

Quebec's Law 25 is already in force and already expects technology that profiles, locates or identifies a person to be off by default. The European rules tightened before that. And Bill C-36The Protecting Privacy and Consumer Data Act, tabled June 2026 and still before Parliament proposes administrative penalties up to $10 million or 3 percent of gross global revenue, whichever is greater, plus a private right of action. One of those is a live obligation, one reaches you only if you sell into Europe, and one is still a proposal. Taken together, though, the trend is not subtle. Privacy expectations in Canada are tightening rather than loosening.

Same work, less pressure

Here is the practical point. The work that gets you ready does not change based on when you do it. A consent setup that works, tags that hold until someone agrees, a real first party policy: that is the same job today as it will be the day a new law lands. The only thing that changes is the pressure around it. Do it now and it is a calm line item. Do it under a live deadline and it is a scramble, usually at a worse price and a worse time.

Cheap insurance

The most honest way to think about it is insurance. A modest amount of web work now buys you out of a much larger, more stressful version of the same work later, plus the risk that sits in between. And unlike most insurance, the premium here also just gives you a better, more trustworthy site in the meantime.

The other half of the return has nothing to do with the law. A site that tells people what it collects, and then honours their answer, is a site people trust more. That shows up long before any bill does.

We are not lawyers and none of this is legal advice. It is what the rules say today and what we find on real sites. For your own obligations, talk to a lawyer.

If you want to get ahead of it calmly, we can look at where your site stands and lay out what closing the gap would take, with no deadline breathing down anyone's neck.