The Personal Information Protection and Electronic Documents Act governs private-sector handling of personal information in Canada, alongside substantially similar provincial laws in some provinces.
Accountability, purpose, consent, limiting collection, use and retention, accuracy, safeguards, openness, access and challenge.
Consent appropriate to sensitivity, with clear purpose and the ability to withdraw.
Report breaches of security safeguards posing real risk of significant harm to the OPC and affected individuals.
British Columbia, Alberta and Quebec operate substantially similar private-sector laws.
We map your processing to this regime, build the controls behind the obligations, and prepare the evidence that proves compliance.
Start a conversation