This is general information, not legal advice. For anything contract- or project-specific, talk to a privacy lawyer.
Ask five people on a Canadian compliance team which privacy law governs their AI project, and you'll get five different answers: PIPEDA, Bill 25, "the CPPA," sometimes GDPR because