AIDA
Artificial Intelligence and Data Act (Bill C-27, Part 3)
Canada's first federal AI regulation law
AIDA is Part 3 of Bill C-27 and will be Canada's first comprehensive AI law. It targets high-impact AI systems and requires impact assessments, bias mitigation, transparency obligations, and human oversight. Organizations that develop or deploy AI systems that make consequential decisions about people must assess and manage risks before deployment.
Who must comply with AIDA?
Organizations that 'make available' or use 'high-impact AI systems' in Canada. This includes AI tools used in hiring, credit scoring, healthcare diagnostics, criminal justice, and content recommendation — sectors to be defined by regulation.
Not sure if AIDA applies? Run a free assessment →
Key obligations under AIDA
Impact Assessment
Conduct and document an AI impact assessment before deploying a high-impact AI system. Assess risks related to bias, harm, and rights.
Bias Mitigation
Identify and implement measures to mitigate biased output that could harm individuals based on protected characteristics.
General Measures
Implement governance measures to manage risks of harm or bias throughout the AI lifecycle — from design to decommissioning.
Transparency Notices
Inform individuals when they interact with a high-impact AI system and how it affects decisions about them.
Record Keeping
Keep records of your impact assessments, risk management measures, and incident reports. The AI Commissioner can inspect.
Incident Reporting
Report material harm caused by a high-impact AI system to the Commissioner and affected individuals.
Penalties & enforcement
AIDA penalties mirror CPPA — both at $25M — signalling Canada's intent to align AI and privacy enforcement
Run a free AIDA gap assessment
Answer 47 questions, get a scored gap report, and see exactly what you need to do to comply with AIDA — in under 3 hours. Free forever.
Start free assessment