Pilot phase: CAIM is under construction. Records are provisional, based on public sources, and have not yet been peer-reviewed. Feedback welcome.
Escalating Severe Confidence: high

Multiple biometric surveillance systems have been deployed across Canada — in malls, police forces, and public venues — without prior privacy impact assessment or public disclosure. Canada has no federal legislation specifically governing biometric surveillance.

Identified: February 27, 2020 Last assessed: March 8, 2026

Canada has no federal legislation specifically governing biometric surveillance technology. This absence of AI-specific governance has been repeatedly demonstrated: the RCMP deployed Clearview AI's facial recognition without a privacy impact assessment, Cadillac Fairview captured over 5 million facial images covertly in Canadian shopping malls, Canadian Tire deployed facial recognition across 12 British Columbia stores without customer notification, and the SPVM acquired an AI surveillance platform with undisclosed biometric capabilities including facial recognition, ethnicity detection, and emotion analysis.

The structural pattern is consistent across law enforcement and commercial sectors: biometric surveillance capability is acquired through standard procurement and vendor relationships that have no mechanism to evaluate or constrain the technology before deployment. This pattern is escalating because surveillance technology capability is increasing (the SPVM's platform includes built-in ethnicity detection and emotion analysis) while the governance framework remains unchanged.

Materialized Incidents

Harms

Canadian law enforcement and commercial operators have deployed biometric surveillance without legislative framework, mandatory PIAs, or public disclosure. The RCMP used Clearview AI without a PIA, Cadillac Fairview captured 5 million facial images covertly in shopping malls, and Canadian Tire deployed facial recognition across 12 BC stores without customer notification.

Disproportionate SurveillancePrivacy & Data ExposureSeverePopulation

Canada has no federal legislation specifically governing biometric surveillance. Privacy Commissioners have investigated individual cases but cannot establish prospective rules. The gap enables a pattern of deploy-first, investigate-later governance where biometric data is collected before oversight catches up.

Disproportionate SurveillanceAutonomy UnderminedSignificantPopulation

Evidence

3 reports

  1. Regulatory — Office of the Privacy Commissioner of Canada (Oct 29, 2020)

    Cadillac Fairview captured 5 million facial images covertly

  2. Regulatory — Office of the Privacy Commissioner of Canada (Jun 10, 2021)

    RCMP deployed Clearview AI without privacy impact assessment

  3. Regulatory — Office of the Privacy Commissioner of Canada (Mar 28, 2024)

    Canadian Tire deployed facial recognition without customer notification

Record details

Responses & Outcomes

Office of the Privacy Commissioner of CanadainvestigationActive

Issued investigation report finding Cadillac Fairview's use of facial recognition violated PIPEDA

Office of the Privacy Commissioner of CanadainvestigationActive

Issued joint investigation report finding RCMP use of Clearview AI contravened Privacy Act

Policy Recommendationsassessed

Federal or provincial legislation specifically governing biometric surveillance technology deployment

Office of the Privacy Commissioner of Canada (Jun 10, 2021)

Mandatory privacy impact assessment before any biometric data collection, with public disclosure of results

Office of the Privacy Commissioner of Canada (Jun 10, 2021)

Independent oversight body for law enforcement use of AI and biometric surveillance

Office of the Privacy Commissioner of Canada (Jun 10, 2021)

Consent requirements and disclosure obligations for commercial biometric collection

Office of the Privacy Commissioner of Canada (Oct 29, 2020)

Prohibition on covert biometric data collection in commercial settings

Office of the Privacy Commissioner of Canada (Oct 29, 2020)

Editorial Assessment assessed

Multiple documented deployments of biometric surveillance in Canada — by law enforcement, retailers, and commercial operators — occurred without prior privacy impact assessment or public disclosure. Canada has no federal legislation specifically governing biometric surveillance technology. The Privacy Commissioner has recommended a moratorium on police use of facial recognition until a legislative framework is in place.

Entities Involved

AI Systems Involved

Clearview AI Facial Recognition Platform

Facial recognition system matching against database of billions of scraped images; deployed by RCMP without privacy assessment

Related Records

Taxonomyassessed

Domain
Law EnforcementRetail & Commerce
Harm type
Privacy & Data ExposureDisproportionate Surveillance
AI pathway
Deployment ContextOversight AbsentMonitoring Absent
Lifecycle phase
ProcurementDeploymentMonitoring

Changelog

Changelog
VersionDateChange
v1Mar 8, 2026Initial publication

Version 1