AI brief: Canada’s new AI funding is repayable, so apply before you spend

01Ottawa adds $500 million for AI projects, and the money is repayable

On October 13, Ottawa added $500 million over five years to its Regional Artificial Intelligence Initiative ($700 million in all), run by the regional development agencies, with intake dates that vary by region. In Quebec, Canada Economic Development (CED) is accepting applications from SMEs ready to adopt AI: repayable support for up to 50% of authorized costs. Southern Ontario opened the same day, until January 19, 2027, or November 24, 2026 if your project’s costs start before March 31, 2027. Its AI Adoption stream wants at least 3 years in business and 5 to fewer than 500 full-time-equivalent employees; it contributes $125,000 to $5 million, up to 50% of costs, interest-free, normally repaid starting a year after the project ends.

Why it matters: this isn’t money for ChatGPT seats. Ontario’s stream is for projects “beyond the purchase of commonly available AI tools”, and a $125,000 minimum at 50% means a project of at least $250,000 (our arithmetic): that $40,000 quote is too small there. Quebec’s page lists no minimum. Ontario’s list of eligible work does go beyond software: a readiness assessment, data quality, training, cybersecurity, responsible-use guidelines. And in Quebec, costs count only from the date the application is submitted. Ontario’s rules aren’t Quebec’s.

02Copilot will treat outside emails as untrusted, if Outlook tags them

Also on October 13, Microsoft described a new layer in Microsoft 365 Copilot that sorts what it reads into trusted and untrusted content. Emails from outside your organization can be classed as untrusted, sent through a “quarantined, capability-constrained” path and transformed before the main model sees them. The target is indirect prompt injection: an ordinary-looking email hiding instructions the assistant may follow when you ask it to summarize your inbox. To set it up, Microsoft points admins to an Outlook sender setting and its guidance for CVE-2026-55145, which says to turn on Outlook’s external sender tagging.

Why it matters: if Copilot reads your inbox, every client and supplier email is a way in. Microsoft says no single mitigation stops every injection attempt and availability varies by tenant: keep a person between the summary and any action.

03Quebec’s privacy watchdog wants the “necessity” test spelled out

On October 13, Quebec’s Commission d’accès à l’information (CAI) published a note from its 2026 five-year report. The necessity criterion limits how organizations collect, use, share and keep personal information; the CAI sees several obstacles to applying it and recommends spelling the test out in the law, with clearer guidelines. These are recommendations, not a new law. The rule already exists: Quebec’s private-sector privacy act says to set your purposes before collecting, and to collect only the information necessary for them (sections 4 and 5).

Why it matters: pasting a customer export into an AI tool is a use of personal information. A weekly summary of open requests needs topic and status, not names, emails and full messages. Our free prompt trims a note down to what the task needs. General information, not legal advice.