Compliance

Regulated person

A person or organization subject to AIDA obligations.

What it triggers

Under the Digital Charter Implementation Act (Bill C-27), a regulated person would have been required to comply with AIDA's duties such as risk assessments, mitigation, and documentation when engaged in designing, developing, or making available AI systems in interprovincial or international trade and commerce.source

Definition

A natural or legal person who is engaged in designing, developing, or making available AI systems in interprovincial or international trade and commerce and thus is required to comply with AIDA's duties (e.g., risk assessments, mitigation, documentation); the bill also specified scope exclusions for particular government or national security actors.

Digital Charter Implementation Act (Bill C-27) — An Act to enact the Consumer Privacy Protection Act, the Personal Information and Data Protection Tribunal Act and the Artificial Intelligence and Data Act

Not to be confused with

AI developer/provider

While a regulated person is defined under AIDA as subject to specific compliance obligations in certain trade contexts, an AI developer/provider more broadly refers to any entity that develops, deploys, or offers AI products or services without specifying regulatory duties.

AI system developer

A regulated person under AIDA carries defined compliance duties tied to trade scope and exclusions, whereas an AI system developer simply describes a person or organization that designs, trains, or configures an AI system.

Questions and answers

Who counts as a regulated person under AIDA?

A regulated person under the Digital Charter Implementation Act (Bill C-27) is a natural or legal person engaged in designing, developing, or making available AI systems in interprovincial or international trade and commerce. This status triggers AIDA compliance duties. Certain government or national security actors are excluded from the scope.

What obligations apply to regulated persons in Bill C-27?

Regulated persons would have been required to perform risk assessments, mitigation, and documentation under AIDA. These duties apply to activities in designing, developing, or making AI systems available in specified trade contexts.

Does Bill C-27 still regulate persons under AIDA?

No, Bill C-27 which included AIDA has been withdrawn, so there are no current regulated person obligations under this instrument.