Living in Canada and PIPEDA being a guideline for my netnographic research, I can tell you, this law is 20 years old and terrible. A new law Bill C-27 has been proposed, but has been languishing in Parliament for 3 years now. The new law would address AI and data collection, but right now, it doesn't.