Canada Just Changed How AI Can Use Your Data – Here’s What to Know
If you use ChatGPT, Copilot, or any image generator that trains on user inputs, a recent privacy ruling in Canada could eventually affect how those services handle your personal information. In May 2026, the Office of the Privacy Commissioner of Canada (OPC) issued a decision that restricts companies from using personal data to train AI models without explicit consent. Here’s what happened, why it matters, and what you can do to protect your data right now.
What Happened
The ruling interprets Canada’s federal privacy law, PIPEDA (Personal Information Protection and Electronic Documents Act), in a way that requires companies to obtain meaningful consent before using personal data for AI training. According to the OPC, scraping publicly available personal information or repurposing data collected for one purpose (e.g., customer support) to train a generative AI model is not allowed unless the individual has consented specifically to that use.
The decision stems from a complaint about an unnamed company, but it sets a precedent for how all organizations subject to PIPEDA must treat personal data in AI development. The Information Technology and Innovation Foundation (ITIF), a think tank, criticized the ruling as overly restrictive, arguing it could hamper innovation and create legal uncertainty for AI companies operating in Canada.
Why It Matters for You
If you live in Canada, this ruling gives you stronger grounds to demand that AI services not train on your data without your permission. For users in other countries, the decision could influence regulators in the European Union (where the AI Act is still being implemented), the United States (where no federal privacy law exists), and elsewhere. Canada’s ruling adds to the growing global conversation about consent and AI training.
In practice, many popular AI tools already offer opt-out settings or data deletion options, but not all do. The ruling may pressure more companies to build consent mechanisms, even outside Canada, to avoid legal risk. For consumers, the immediate effect is that you now have a clearer argument if a service refuses to honor your data privacy preferences.
What You Can Do to Protect Your Data
Here are concrete steps you can take today, regardless of where you live:
Check opt-out settings – Major AI platforms like OpenAI (ChatGPT), Microsoft Copilot, Google Gemini, and Meta AI have settings to prevent your conversations or uploads from being used for training. Go to your account settings and look for “Data Controls” or “Model improvement.” Toggle them off.
Delete your chat history – Many services allow you to delete your past interactions. Doing so removes that data from their training sets going forward (though it won’t retroactively remove data already used). Some platforms, like ChatGPT, let you export and then delete your entire history.
Use pseudonyms and limit personal details – Even with privacy settings enabled, avoid sharing your full name, address, phone number, or financial information in AI prompts. Treat these tools as public spaces.
Request data deletion – If you’re in Canada or the EU, you can file a formal request under PIPEDA or GDPR asking a company to delete your personal data and confirm it has not been used for training. Many companies now have privacy request forms.
Read the privacy policy – Before signing up for a new AI tool, skim its privacy policy. Look for phrases like “we may use your data to improve our models” and check whether you can opt out.
Use local or open‑source alternatives – If you want more control, consider tools that run on your own device (like some open‑source language models) or services that explicitly commit to not training on user data.
Bottom Line
Canada’s privacy ruling is a reminder that the data you share with AI tools is not necessarily yours alone once it leaves your device. While the full global impact remains to be seen, the trend is clear: regulators are pushing for more consent and transparency. In the meantime, taking a few minutes to adjust your settings can give you more control over how your personal information is used.
Sources: Office of the Privacy Commissioner of Canada (May 2026 decision); Information Technology and Innovation Foundation blog (May 12, 2026); PIPEDA text. For opt‑out instructions, refer to each service’s official help pages.