Ontario has launched a consultation on "strengthening privacy protections in Ontario" which will likely result in a privacy bill. This incl a survey which is open to the public (no privacy or tech expertise needed). Now is the time to have your say! https://www.ontario.ca/form/survey-strengthening-privacy-protections-ontario

The survey covers the ground of the common data protection considerations, but still relies fairly heavily on notice & consent as the model.
Most ppl don't know that political parties are exempt from privacy laws. It's time to change that.

Some questions about buying & selling data:

Ontario is also thinking about profiling & a right to deletion: (IMO, orgs should set retention periods based on the data & purpose for collection; shouldn't need to be pinged by the user to delete.)

Long form privacy policies are such a pain. Lots of disruption possible here for industry to get creative. Also highlights that relying only on consent in all situations leads to unreadable privacy policies that are merely a compliance tool.

The final screenshot I'll share has Q's about data portability & biometric data. This biometric data question will likely get a lot of feedback from industry & researchers.

@IPCinfoprivacy Commissioner's blog post: https://www.ipc.on.ca/has-the-time-come-for-a-private-sector-privacy-law-in-ontario/