Privacy Rules Add Three Enforcement Directorates

Summary#

These final regulations, Regulations Amending the Privacy Regulations: SOR/2026-147, update who federal departments can share personal information with for law enforcement or investigations. They add three enforcement directorates to Schedule II of the Privacy Regulations and remove an obsolete reference to the Security Intelligence Review Committee. The rules came into force when registered on June 22, 2026 (published in the Canada Gazette on July 1, 2026).

What it does#

• Adds these three investigative units to Schedule II of the Privacy Regulations:
  • Environmental Enforcement Directorate, Department of the Environment
  • Wildlife Enforcement Directorate, Department of the Environment
  • High Net Worth Compliance Directorate, Canada Revenue Agency
• Removes the now-defunct Security Intelligence Review Committee from Schedule II.
• Practically, this lets other federal departments share personal information with those listed directorates to support law enforcement or lawful investigations. It does not force disclosure — it gives departments the discretion to share when appropriate.

Who's affected#

• The named directorates themselves: Environmental Enforcement Directorate, Wildlife Enforcement Directorate, and High Net Worth Compliance Directorate.
• Other federal departments and agencies that hold personal information and may be asked to share it.
• People whose personal information could be relevant to environmental, wildlife, or high-net-worth tax investigations — for example individuals or entities under investigation.
• The source says small businesses are not expected to be affected.

Why it matters#

• It should let investigators get needed information faster. That can speed up environmental and wildlife enforcement and high-net-worth tax audits.
• Faster information sharing may help prevent or stop violations sooner, improve coordination between agencies, and reduce delays from negotiating separate information-sharing agreements.
• The change does not expand the directorates’ legal investigative powers; it clarifies that other federal institutions may disclose information to them for lawful investigations.
• The Office of the Privacy Commissioner of Canada flagged privacy concerns about sharing information when people have a reasonable expectation of privacy. The office welcomed that the directorates plan to seek warrants or production orders in those cases and to issue guidance and training to staff.