OPC, Principles for responsible, trustworthy and privacy-protective generative AI technologies (7 December 2023): legal authority and consent (Office of the Privacy Commissioner of Canada, Principles for responsible, trustworthy and privacy-protective generative AI technologies, principle 1)
The OPC treats generative AI as fully inside current privacy law and says every party, including a holder that supplies data, should know and document its legal authority for the disclosure. Where consent is that authority it should be as specific as possible. I found no AI-training exception in OPC guidance.
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
In the source's own words
“Know and document their legal authority for collection, use, disclosure and deletion of personal information that occurs as part of the training, development, deployment, operation, or decommissioning of a generative AI system. ... Consent should be as specific as possible, and deceptive design patterns should be avoided.”
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide