Overview
PIPEDA was enacted in 2000 to promote privacy and support electronic commerce in Canada. It applies to private-sector organizations across Canada that handle personal information in the course of commercial activities, with some exemptions for organizations operating within provinces with comparable privacy laws. The law establishes core privacy principles based on a National Standard of Canada for protecting personal information. Key areas include obligations for valid consent, breach notification requirements, and accountability through audits and compliance agreements. The law also sets specific provisions for electronic documents and amendments to other federal acts. PIPEDA is enforced by the Privacy Commissioner of Canada, who has investigative and reporting powers.