Personal Information Protection and Electronic Documents Act
The Personal Information Protection and Electronic Documents Act (PIPEDA) is a Canadian federal law that sets rules for the collection, use, and disclosure of personal information in the course of commercial activities. It aims to balance individuals' privacy rights with industry needs for personal data use.
PIPEDA was enacted in 2000 to promote privacy and support electronic commerce in Canada. It applies to private-sector organizations across Canada that handle personal information in the course of commercial activities, with some exemptions for organizations operating within provinces with comparable privacy laws. The law establishes core privacy principles based on a National Standard of Canada for protecting personal information. Key areas include obligations for valid consent, breach notification requirements, and accountability through audits and compliance agreements. The law also sets specific provisions for electronic documents and amendments to other federal acts. PIPEDA is enforced by the Privacy Commissioner of Canada, who has investigative and reporting powers.
