Canada’s Digital Safety Regulator Is Still a Proposal
Matthew Leo · Published November 6, 2026 · Canada Tech
Budget 2026 gives Canada’s proposed online-safety regime a budget before it has a law. The federal plan proposes C$176.3 million over five years, starting in 2026–27, plus C$29.3 million a year after that, to establish a Digital Safety and Data Protection Commission of Canada.
The money does not make the commission operational by itself. The regulator depends on Bill C-34, the Safe Social Media Act, which remains before Parliament. The current LEGISinfo record for Bill C-34 identifies it as proposed legislation, while the budget describes the commission and its duties in future tense.
What the proposed commission would oversee
Bill C-34 would create duties for regulated social-media services and AI chatbot services. According to the government’s official fact sheet, covered services would need to assess risks, reduce exposure to harmful content, publish safety plans and provide reporting and blocking tools.
The bill also proposes an age restriction that would prevent children under 16 from holding social-media accounts unless a service obtained an exemption by demonstrating sufficient safeguards. It would require rapid action on child sexual abuse material and non-consensual intimate images, including deepfake sexual images.
AI chatbots are included because their risks are not identical to a public feed. The budget says chatbot providers would face requirements related to harmful responses, risky behaviour and transparency about crisis-reporting thresholds. That is a significant expansion beyond content moderation: it reaches product design, user interaction and escalation policies.
What Budget 2026 changes
The budget’s digital-safety section supplies a proposed operating envelope and combines digital safety with data-protection enforcement. The Canadian Press, in reporting carried by CKOM, independently confirmed the five-year amount and described the regulator as responsible for the government’s proposed safety and privacy legislation.
That still leaves important implementation questions:
- Scope: regulations will need to define which services and account types are covered.
- Age assurance: platforms need a method that protects children without collecting disproportionate identity data.
- Chatbot thresholds: providers need clear rules for when a safety response becomes a report to an outside service.
- Appeals and transparency: users and companies need routes to challenge decisions and see how enforcement is applied.
What families and companies should do now
Families should not treat the budget as a new protection already in force. Existing platform controls, device-level supervision and school policies still matter. Mapletechie’s review of Google’s school AI controls is a useful example of the gap between an available product setting and a Canadian policy requirement.
Companies that operate social platforms or chatbot services in Canada should start mapping their safety assessments, child-account design, crisis procedures and synthetic-content labels to the bill. They should not claim compliance with an act that has not passed. The practical milestone is Royal Assent followed by regulations, commencement dates and commission guidance.
The budget makes the government’s intent more credible because it attaches money to enforcement. It does not settle Parliament’s debate or fill in the operational rules. For now, the commission is funded on paper and consequential in design, but still proposed.
Tags: Digital Policy, children, privacy, Canada