Canada’s AI rules are a patchwork; new tender seeks a map

Canada calls its AI rules a patchwork. Now it wants a map that moves.

Why it matters

The federal AI Strategy says there is no common governance model. A new Shared Services Canada challenge seeks a Phase 2 prototype linking registered systems to changing rules, controls and evidence.

Daniel Kade31 October 2026 at 16:04 UTCReading Time 2 minLast update: 31 October 2026

A rule map is useful only when each changing requirement can be traced to the systems and evidence it governs.

Summary

Canada’s 2025–2027 AI Strategy says federal policy is fragmented and no common governance model exists yet.
Shared Services Canada seeks a Phase 2 prototype, not a deployed platform; official notices also disagree on the estimated number of contracts.

For covered automated decision systems, a change in function or scope triggers a new Algorithmic Impact Assessment review. An official must first find the right system record, rule version and assessment. Canada’s AI Strategy calls federal policy a patchwork. Shared Services Canada now wants a prototype that connects those records. The tender gives no starting count of systems to map.

The assessment has 65 risk questions and 41 mitigation questions. They cover the system, algorithm, decision, impact, data and safeguards. Departments complete it during design and before production. They revisit it on schedule and when the system’s function or scope changes. If the register points to the wrong assessment, officials cannot tell what needs review.

SSC wants the prototype to version changing requirements. It should link each requirement to registered systems, controls, assessments and evidence, then flag systems that may need reassessment. Each finding should name the rule, evidence, result and confidence in plain language. An authorized reviewer can validate, reject, modify or annotate it. The system should preserve an auditable history.

This is Phase 2 prototype procurement, not a product launch. Proposals must target technology readiness levels 5–9. ISED estimates one to two Phase 2 contracts; the linked CanadaBuys notice estimates one. Each notice sets a C$2 million ceiling and up to 20 months per contract. Neither promises an award. Proposals close on 22 December at 14:00 Eastern.

The tender names no first system and publishes no baseline inventory. It also does not call the prototype the strategy’s implementation vehicle. The eventual award and acceptance record should show which requirements, systems and assessments are connected. Without the number of eligible systems, a count of imported records cannot show coverage.

Sources: Federal AI Strategy 2025–2027; Shared Services Canada challenge; CanadaBuys tender notice; Algorithmic Impact Assessment; Directive on Automated Decision-Making.