Ms. Denham, there are two sections of the GDPR that Bill C-27 copied. It ended up with a copy that, strangely, looks like it has been AI-generated. That would be “sensitive information” and the “legitimate interest” exemption.
In the GDPR, legitimate interest is meant to be a rare exception—not used normally, as it is in Bill C-27. The GDPR has a legitimate interest analysis that must be submitted and approved. Do we need to reform Bill C-27 to better copy the GDPR?