PIPEDA - Personal Information Protection and Electronic Documents Act
Canada's main federal private-sector privacy law. Sets rules for collection, use, disclosure, safeguarding, access, correction, and mandatory breach reporting where there is a real risk of significant harm.
Who it applies to
Private-sector organizations in commercial activity where no substantially similar provincial law applies, plus all federally regulated private organizations (banks, airlines, telecoms, etc.) across Canada.
Common issues and topics
Regulations made under this Act
Last checked Jun 1, 2026 · List last updated Apr 13, 2026Sets the mandatory breach reporting and notification requirements — the real-risk-of-significant-harm threshold, what goes in the report, and the record-keeping obligation.
Lists categories of personal information that are publicly available for purposes of Schedule 1 consent exceptions (e.g., business directories, professional registers).
Extends PIPEDA Part 1 obligations to specified Crown agents that operate in a commercial capacity.
Exempts Quebec private-sector organizations from PIPEDA Part 1 because Quebec's Act respecting the protection of personal information in the private sector is substantially similar.
Exempts Alberta private-sector organizations from PIPEDA Part 1 because Alberta's PIPA is substantially similar.
Exempts B.C. private-sector organizations from PIPEDA Part 1 because B.C.'s PIPA is substantially similar.
Authorizes electronic formats and signatures for specific real property transactions under the Federal Real Property and Federal Immovables Act.
Exempts Ontario health information custodians from PIPEDA Part 1 to the extent they are subject to Ontario's PHIPA.
Prescribes the technical standards a secure electronic signature must meet for purposes of PIPEDA Part 2.
Authorizes electronic alternatives to written documents for certain Canada Labour Code obligations (e.g., pay stubs, statements of earnings).
Exempts New Brunswick health information custodians from PIPEDA Part 1 to the extent they are subject to N.B.'s PHIPAA.
Exempts Newfoundland and Labrador health information custodians from PIPEDA Part 1 to the extent they are subject to N.L.'s PHIA.
Exempts Nova Scotia health information custodians from PIPEDA Part 1 to the extent they are subject to N.S.'s PHIA.