PIPEDA
PIPEDA is Canada's federal privacy law for private-sector organisations' commercial activities (outside provinces with similar laws, such as Québec, Alberta and British Columbia). It requires meaningful consent, limits on collection and use, safeguards, and access to your own information.
In one line, for a 12-year-old
PIPEDA is Canada's rulebook for how businesses must treat your personal information.
An example
You can ask an Ontario company what personal information it holds about you, including data it used in an AI system, and it must generally answer within 30 days.
Why it matters to people
The Office of the Privacy Commissioner of Canada has said PIPEDA applies to AI and has investigated AI companies. You can file a complaint with the OPC if you think your rights were breached.