Frameworks

AI governance frameworks in Canada

Canada governs automated decisions in the federal public sector through a binding directive and impact assessment, with sector regulators setting expectations for industry.

Law

LawPIPEDA and AIPIPEDA and the privacy commissioners' principles for generative AIHow PIPEDA and the privacy commissioners' generative AI principles apply to AI in Canada today, and what Bill C-36 would add for automated decision systems.PIPEDA in force. Commissioners' principles issued 7 December 2023. Bill C-36 at second reading LawQuebec Law 25 automated decisionsQuebec private sector privacy act, section 12.1 on decisions based exclusively on automated processing (Law 25)Section 12.1 of Quebec's private sector privacy act, added by Law 25, requires notice of fully automated decisions, reasons on request and a chance of review.In force since 22 September 2023 LawOntario AI disclosure in job postingsOntario Employment Standards Act, AI disclosure in publicly advertised job postingsSince 1 January 2026, Ontario employers with 25 or more employees must state in public job postings when AI is used to screen, assess or select applicants.In force since 1 January 2026

Regulator guidance

Regulator guidanceOSFI Guideline E-23OSFI Guideline E-23, Model Risk Management (2027)OSFI Guideline E-23 sets model risk expectations for Canadian federally regulated financial institutions, including AI and ML models, from 1 May 2027.Final, effective 1 May 2027

Public sector policy

Public sector policyCanada Directive on Automated Decision-MakingDirective on Automated Decision-Making and the Algorithmic Impact AssessmentCanada's Directive on Automated Decision-Making binds federal institutions using automated decision systems, with a four-level Algorithmic Impact Assessment.In force, fourth-review amendments in effect since 24 June 2025 Public sector policyOntario Responsible AI DirectiveOntario Responsible Use of Artificial Intelligence DirectiveOntario's Responsible Use of Artificial Intelligence Directive sets AI risk management, disclosure and reporting rules for ministries and provincial agencies.In effect since 1 December 2024

Voluntary framework

Voluntary frameworkCanada generative AI code of conductVoluntary Code of Conduct on the Responsible Development and Management of Advanced Generative AI SystemsCanada's voluntary code for advanced generative AI sets six principles with measures for developers and managers. What it asks of them and who has signed it.Voluntary, open for signature since September 2023

All jurisdictions

Questions

Which AI governance frameworks are listed for Canada?

This page lists 7 instruments for Canada: PIPEDA and AI, Canada Directive on Automated Decision-Making, OSFI Guideline E-23, Quebec Law 25 automated decisions, Canada generative AI code of conduct, Ontario Responsible AI Directive and Ontario AI disclosure in job postings. Which ones apply to you depends on where you operate, your sector and how you use AI. Each framework page explains what it asks of you.

Does Aicura support the frameworks listed for Canada?

The frameworks listed for Canada are not built into Aicura. They are explained here to support your governance work, and every plan starts with the AI register, the record any framework needs first.

Start with the AI you run.

Every framework begins with knowing which AI systems and agents you have. The AI register is free to start.