Canada’s new proposed data privacy legislation would combine elements of the EU rights-based framework and the US consumer protection model – but the country’s privacy commissioner has expressed concerns that the proposal gives too much leeway to commercial interests.