Consumer Privacy Protection Act could lead to fines for deceptive designs in apps and websites

Canada's proposed Consumer Privacy Protection Act prohibits online consent processes that are deceptive or misleading.

Deceptive user interface designs can mislead, coerce and exploit people for the benefit of for-profit companies.

The CPPA is a component of Bill C-27, described by the federal government as an attempt to improve Canadian privacy law and ensure responsible use of personal information.

Some AI developers don’t engage directly with consumers, which raises questions about who is responsible for ensuring data is acquired via lawful consent processes.

The lack of a direct relationship with some AI developers, along with the challenge of understanding how data may be used in the future, further burdens people with having to decide whether clicking “sign up” is wise.