AI Compliance in Canada: PIPEDA, Quebec Law 25, Ontario Rules

Your situation

Compliance questions usually arrive with a concrete trigger:

• A client or insurer questionnaire asks how you control AI use and where data goes.
• A Quebec customer base. Your chatbot, scoring or triage tool makes decisions about Quebec residents.
• Hiring in Ontario. You use AI to screen or rank applicants and post jobs publicly.
• A public-sector contract. A department, municipality, hospital or school board asks for impact assessments and documentation.
• Staff use AI with client data. Nobody has checked the vendor terms or where prompts are processed.

The rules that apply in September 2026

Sector regulators add their own expectations, for example in financial services and health; we include them when they apply to your organization.

What Remolda does

AI use inventory. Every tool and workflow that uses AI, the data it touches, who owns it and which vendor processes it.

Obligation map. For each use: which rules apply, what is already in place and what is missing. The table above is the starting point; your sector adds to it.

Operational documents. Draft notices for automated decisions, PIA inputs for Quebec and Ontario public bodies, job-posting wording, vendor data-location records and an AI use policy for staff.

Vendor terms and data location. Where prompts are stored and processed for each tool. Details differ sharply between vendors; see AI vendor selection.

Fixes in the build. When we build a chatbot or an automation, notices, review points and logs are part of the design.

Remolda handles the technical and operational side. Legal opinions come from your counsel, and we work with them.

How long it takes

The one-week AI Readiness Review gives a first view of current AI use. In our experience a full obligation map with documents usually takes two to four weeks. It depends on the number of AI uses, the provinces involved and the review cycle with legal and privacy.

What it costs

The AI Readiness Review is $490 CAD + HST: current AI use is covered in the session and privacy questions are flagged in the summary. The two-week AI Opportunity Audit ($2,900) adds risk notes per use case. A full obligation map with documents is quoted after a call. See the pricing page.

Staff rules usually come first. Our AI use policy template turns these Canadian rules into a 12-section policy in Word and PDF.

Why Remolda for AI compliance work

1. Every rule with its source. Each regulatory point on our documents links to the official text, with the date it was checked.
2. Current status tracked. Bills that died, bills in Parliament and rules in force are kept apart.
3. Compliance built into delivery. Remolda designs the AI workflow together with its notices, review points and logs.
4. Quebec and federal ready. Work and documents in English or French.
5. Clear role split. Operational work by Remolda, legal opinions by your counsel.

How the work runs

Compliance work runs through Audit, Strategy and Evolve in the Remolda Cycle.

1. Inventory. AI tools, workflows, data and vendors.
2. Map. Rules per use, gaps ranked by risk.
3. Documents. Notices, PIA inputs, policy, vendor records.
4. Review. With your legal and privacy leads.
5. Monitor. Under a monthly engagement, rule changes are tracked and the map is updated when a bill such as C-36 advances.