GRCLibrary.ai

Annex

Canada AI Regulatory Requirements

This annex gives the adopter a single per-regime view of Canada's approach to artificial-intelligence governance. Unlike the European Union or Colorado, Canada has no in-force comprehensive AI statute: the proposed federal Artificial Intelligence and Data Act (AIDA) lapsed (see below), so Canadian AI governance is a patchwork of a binding federal public-sector directive, federal soft-law for industry, a sector-specific financial-services guideline, a provincial public-sector statute, and a voluntary national standard. This annex presents each instrument, states its status accurately (what is in force, what is future-effective, and what is voluntary), and frames which obligations land on the adopter. It cites the instruments by reference and cross-references the privacy layer rather than restating it.

Type
Annex
Version
1.0.12
Date
2026-10-27
Owner
Chief Information Security Officer
Approving authority
Governance Library Maintainer
Classification
Public
Confidentiality
Public
Category
AI Governance
Review frequency
Annual and upon material change to the Canadian AI regulatory landscape
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • Purpose
  • The Canadian AI regulatory landscape: patchwork, not a statute
  • Federal public-sector automated decision-making: the Treasury Board Directive
  • The Algorithmic Impact Assessment
  • Federal generative-AI guidance: the FASTER principles
  • Federal public-service AI adoption: the AI Strategy for the Federal Public Service 2025-2027
  • Federal soft-law for industry: the ISED Voluntary Code
  • National strategy: AI for All
  • Provincial: Ontario (the Enhancing Digital Security and Trust Act)
  • Sector-specific: OSFI Guideline E-23 (financial institutions)
  • Voluntary standard: CAN/DGSI 101:2025
  • Adopter-role framing
  • Relationship to Canadian privacy law
  • Limitations
  • Framework alignment

Frameworks it maps to

Related documents