Many businesses in Canada are becoming more aware that they have privacy obligations, but are still confused about which laws apply to them.
This post will break down the various pieces of privacy legislation and when they may apply to your business.
PIPEDA (The Personal Information Protection and Electronic Documents Act) - this is Canadian federal legislation. It applies to businesses who collect "personal information" in the course of their commercial activities. "Personal information" includes any information that is linked to an identifiable individual. This applies to all businesses in most of Canada (see below).
Province Specific Privacy Laws - Some provinces in Canada have made their own privacy laws that apply either in place of PIPEDA (Quebec, Alberta, BC) or in addition to PIPEDA (i.e. for health-related information - Ontario, NB, NL and NS). To read further on these provincial laws - click here. For some organizations, the...