Corporations that flagrantly breach federal privacy law would be subject to maximum $30 million fines under a Commons bill. It follows complaints by the House privacy committee that scofflaws face few sanctions in Canada: “What we need is a regulator.”