C-216 creates a new Duty of Care for online platforms used by minors, requiring default safety settings, parental controls, transparent data/advertising practices, and a reporting channel for harms. It bans dark patterns that weaken protections, forbids using minors’ data or design features to promote products illegal to minors, and appears to prohibit requiring digital IDs to access services. Platforms must keep audit logs, undergo biennial independent reviews, publish annual risk assessments, and face fines up to $25M plus a private right of action for serious harm. It also tightens mandatory reporting of online child sexual exploitation and amends the Criminal Code to outlaw deepfake sexual images, create a specific online-harassment offence, and strengthen tools to identify and restrain offenders.