North America · Canada

Personal Information Protection and Electronic Documents Act (PIPEDA)

Canada's federal private-sector privacy law - likely to be replaced by the Consumer Privacy Protection Act (CPPA) under Bill C-27.

Quick facts

Code: PIPEDA
Jurisdiction: Canada
Region: North America
Enforcement:
Damages, OPC investigations, Federal Court orders
Official source

Get help with PIPEDA Free site scan

PIPEDA is built on ten fair-information principles. We help Canadian and global organisations stay compliant today while preparing for the upcoming CPPA / Bill C-27 regime.

Key principles & obligations

Accountability

Identifying purposes

Consent

Limiting collection

Limiting use, disclosure & retention

Accuracy

Safeguards

Openness

Individual access

Challenging compliance

Related frameworks.

California, USA

California Consumer Privacy Act (CCPA/CPRA)

Grants California residents broad rights over personal information and creates strict obligations for businesses that meet the revenue or data thresholds.

Read summary

United States

Health Insurance Portability and Accountability Act (HIPAA)

US federal standard for safeguarding Protected Health Information (PHI) held by covered entities and their business associates.

Read summary