Last updated on November 4, 2025
No. Canadian privacy law treats facial detection as the collection of biometric data, which is highly sensitive. Under the Personal Information Protection and Electronic Documents Act (PIPEDA), organizations must obtain meaningful consent before collecting or using such data. Using facial recognition for advertising without explicit consent violates these requirements.
The Legal Backbone of Privacy in Canada
Canada’s privacy regime is built on principles of transparency, accountability, and respect for individual autonomy. Facial detection isn’t just another tech gimmick—it involves biometric data, which the Office of the Privacy Commissioner of Canada (OPC) classifies as among the most sensitive personal information. Why? Because biometric identifiers, like facial geometry, are unique and permanent. Unlike a password, you can’t change your face if it’s compromised.
Under PIPEDA, any private-sector organization collecting biometric data must clearly explain why it’s collecting the information, how it will be used, and obtain informed consent. This isn’t optional. The OPC emphasizes that businesses using facial recognition for purposes like advertising must meet strict obligations: lawful purpose, proportionality, and security safeguards.
Why Advertising Faces a Hard Stop
Digital billboards equipped with facial detection might sound futuristic, but in Canada, they collide head-on with privacy law. The OPC guidance for businesses makes it clear: biometric data collection for commercial purposes requires explicit consent. That means no vague disclaimers or passive notices—individuals must actively agree. Without this, the practice is unlawful.
The reasoning is simple: facial recognition can reveal more than identity. It can infer age, gender, and even emotional state, creating risks of profiling and discrimination. The OPC warns that such uses can lead to privacy harms and erode trust in public spaces.
A Patchwork Moving Toward Stricter Rules
Canada currently operates under PIPEDA federally, with provinces like Quebec enforcing even tougher standards through laws such as Law 25, which mandates privacy impact assessments and opt-in consent for biometric systems. Meanwhile, the federal government introduced Bill C-27, which includes the Artificial Intelligence and Data Act (AIDA) to regulate high-impact AI systems, including facial recognition. Though not yet law, it signals a future of tighter controls and heavier penalties for misuse.
Cultural and Ethical Dimensions
Beyond statutes, there’s a cultural expectation in Canada that privacy is a fundamental right. Canadians are wary of surveillance creeping into everyday life. Advocacy groups and regulators have repeatedly flagged facial recognition as a technology that, if left unchecked, could normalize mass monitoring and undermine freedoms.
The OPC’s stance reflects these concerns: organizations must design for privacy from the start, limit data collection to what is strictly necessary, and ensure robust safeguards. Anything less risks not only legal consequences but reputational damage in a market where trust is currency.
Practical Implications for Businesses
Thinking of deploying facial detection on your billboard? Prepare for a compliance marathon:
- Conduct a privacy impact assessment
- Obtain explicit, informed consent from every individual scanned
- Implement strong security measures for biometric data
- Be transparent about retention and deletion policies
Failing these steps isn’t just a technical slip—it’s a violation of Canadian privacy law. The OPC has the authority to investigate complaints and enforce compliance, and provincial regulators are equally vigilant.
The Bottom Line
Digital billboards with facial detection may be a marketer’s dream, but in Canada, they’re a legal minefield. Until comprehensive legislation like Bill C-27 becomes law, the safest route is to avoid biometric advertising altogether—or be ready to meet some of the strictest privacy standards in the world.
See more on Canada
Sources
Biometrics and privacy – Office of the Privacy Commissioner of Canada
https://www.priv.gc.ca/en/privacy-topics/health-genetic-and-other-body-information/biometrics/
Date modified: 2025-08-11
The Artificial Intelligence and Data Act (AIDA) – Canada
https://ised-isde.canada.ca/site/innovation-better-canada/en/artificial-intelligence-and-data-act-aida-companion-document
Ongoing