503:. The Commissioner is required to investigate the complaint and to produce a report at its conclusion. The report is not binding on the parties but is more of a recommendation. The Commissioner does not have any powers to order compliance, award damages, or levy penalties. The organization complained about does not have to follow the recommendations. The complainant, with the report in hand, can then take the matter to the
319:). In 2002, the law was expanded to include the health sector. Finally in 2004, any organization that collects personal information in the course of commercial activity was covered by PIPEDA, except in provinces that have "substantially similar" privacy laws. As of October 2018, seven provinces have privacy laws that have been declared by the federal Governor in Council to be substantially similar to PIPEDA:
44:
216:'s Model Code for the Protection of Personal Information, developed in 1995. However, there are a number of exceptions to the Code where information can be collected, used and disclosed without the consent of the individual. Examples include reasons of national security, international affairs, and emergencies. Under the
224:, whether federal, provincial or foreign. There are also exceptions to the general rule that an individual shall be given access to his or her personal information. Exceptions may include information that would likely reveal personal information about a third party, information that cannot be disclosed for certain
474:
In general, PIPEDA applies to organizations' commercial activities in all provinces, except organizations that collect, use or disclose personal information entirely within provinces that have their own privacy laws, which have been declared substantially similar to the federal law. In such cases, it
470:
The PIPEDA sets out ground rules for how private sector organizations may collect, use or disclose personal information in the course of commercial activities. PIPEDA also applies to federal works, undertakings, and business in respect of employee personal information. The law gives individuals the
478:
Recently, the Office of the
Privacy Commissioner of Canada, as well as academics and members of civil society, have claimed that it does not address modern challenges of privacy law sufficiently, calling for reforming PIPEDA in view of AI. The Canadian government responded to these calls with a
72:
An Act to support and promote electronic commerce by protecting the personal information that is collected, used or disclosed in certain circumstances, by providing for the use of electronic means to communicate or record information or transactions, and by amending the
1007:
693:
475:
is the substantially similar provincial law that will apply instead of PIPEDA, although PIPEDA continues to apply to federal works, undertakings or businesses and to interprovincial or international transfers of personal information.
514:
for a hearing with respect to the subject matter of the complaint. The Court has the power to order the organization to correct its practices, to publicize the steps it will take to correct its practices, and to award damages.
244:"Personal Information", as specified in PIPEDA, is as follows: information about an identifiable individual, but does not include the name, title or business address, or telephone number of an employee of an organization.
467:(Senate Bill S-4) became law, amending the PIPEDA to include a business transaction exemption, mandatory breach notification requirements, enhanced powers for the Privacy Commissioner, and various other updates.
292:
supply an individual with a product or a service even if they refuse consent for the collection, use, or disclosure of your personal information unless that information is essential to the transaction;
262:
expect an organization to collect, use or disclose their personal information reasonably and appropriately, and not use the information for any purpose other than that to which they have consented;
507:. The responding organization cannot take the matter to the courts, because the report is not a decision and PIPEDA does not explicitly grant the responding organization the right to do so.
523:
As a result of long-enduring and central gap in Canada's privacy protections, Bill C-475 was proposed in
February 2013 by Charmaine Borg, MP, proposing several amendments to the
819:
675:
500:
451:
To provide patients with a right to request access to and correction of their records of personal health information held by health information custodians.
978:
420:
537:
714:
1172:
1157:
857:
579:
McClennan, Jennifer P.; Schick, Vadim (2007). "O, Privacy: Canada's
Importance in the Development of the International Data Privacy Regime".
609:
307:
The implementation of PIPEDA occurred in three stages. Starting in 2001, the law applied to federally regulated industries (such as
198:
121:
Section 1 in force 13 April 2000; Parts 2, 3 and 4 in force 1 May 2000; Part 1 in force 1 January 2001; Part 5 in force 1 June 2009
650:
1052:
896:"Fact Sheet: The Digital Privacy Act - Summary of key changes to the Personal Information and Electronic Documents Act (PIPEDA)"
277:
complain about how an organization handles their personal information if they feel their privacy rights have not been respected.
992:
1133:
A regularly updated blog on issues related to privacy law and PIPEDA written by David T. S. Fraser, a
Canadian privacy lawyer.
213:
433:(typically pronounced 'pee-hip-ah'), established in 2004, outlines privacy regulations for health information custodians in
1152:
454:
To impose administrative requirements (regulations) on custodians with respect to records of personal health information.
1162:
471:
right to access and request correction of the personal information these organizations may have collected about them.
679:
177:
organizations collect, use and disclose personal information in the course of commercial business. In addition, the
1167:
233:
448:
To govern the collection, use, and disclosure of personal health information by health information custodians.
798:
543:
777:
511:
504:
271:
expect the personal information an organization holds about them to be accurate, complete, and up-to-date;
756:
220:, personal information can also be disclosed without knowledge or consent to investigations related to
268:
expect an organization to protect their personal information by taking appropriate security measures;
206:
194:
103:
51:
548:
186:
182:
131:
624:
1073:
849:
1025:
952:
910:
853:
598:
437:, Canada. Breaches of PHIPA are directed to the Ontario Information and Privacy Commissioner.
1125:
635:
895:
1137:
Overview of Canada’s
Personal Information Protection and Electronic Documents Act (PIPEDA):
1037:
964:
922:
221:
162:
298:
have personal information policies that are clear, understandable, and readily available.
842:
654:
190:
174:
265:
know who in the organization is responsible for protecting their personal information;
1146:
799:"Personal Health Information Custodians in Newfoundland and Labrador Exemption Order"
274:
obtain access to their personal information and ask for corrections if necessary; and
256:
735:
1074:"Private Member Bill Seeks to Bring Long Overdue Privacy Protections for Canadians"
316:
170:
167:
Loi sur la protection des renseignements personnels et les documents électroniques
205:("Protection of Personal Information in the Private Sector") must be reviewed by
1118:
715:"An Act respecting the protection of personal information in the private sector"
567:
43:
1139:
An overview of Canada's PIPEDA, where
Canadian federal is discussed thoroughly.
1053:"Report of the Standing Committee on Access to Information, Privacy and Ethics"
1130:
1094:
979:"Policy Proposals for PIPEDA Reform to Address Artificial Intelligence Report"
324:
An Act
Respecting the Protection of Personal Information in the Private Sector
289:
obtain consent when they collect, use, or disclose their personal information;
62:
937:
496:
356:(Newfoundland and Labrador), "with respect to health information custodians"
938:"The Personal Information Protection and Electronic Documents Act (PIPEDA)"
510:
PIPEDA provides, at section 14, the complainant the right to apply to the
778:"Personal Health Information Custodians in New Brunswick Exemption Order"
350:(New Brunswick), "with respect to personal health information custodians"
229:
479:
comprehensive reform project currently under
Parliamentary discussion.
232:, or commercial proprietary reasons, and information that is subject to
492:
434:
308:
17:
1136:
495:
for violations of the law's obligations. Instead, PIPEDA follows an
383:
Consent must be garnered for the collection of personal information
209:
every five years. The first
Parliamentary review occurred in 2007.
225:
185:. PIPEDA became law on 13 April 2000 to promote consumer trust in
386:
Collection of personal information limited to reasonable purposes
312:
844:
Guide to the
Ontario Personal Health Information Protection Act
822:. Office of the Privacy Commissioner of Canada. 29 October 2014
820:"Memorandum of Understanding with Alberta and British Columbia"
694:"Provincial legislation deemed substantially similar to PIPEDA"
1126:
Example of a PIPEDA request for video surveillance recordings.
362:(Nova Scotia), "with respect to health information custodians"
1120:
Personal Information Protection and Electronic Documents Act
1006:
Canada, Office of the Privacy Commissioner of (2016-09-12).
840:
Perun, Halyna; Michael Orr; Fannie Dimitriadis (2005). "2".
255:
know why an organization collects, uses, or discloses their
154:
Personal Information Protection and Electronic Documents Act
36:
Personal Information Protection and Electronic Documents Act
344:(Ontario), "with respect to health information custodians"
212:
PIPEDA incorporates and makes mandatory provisions of the
395:
Stored personal information must be accurate and complete
201:. In accordance with section 29 of PIPEDA, Part I of the
1008:"How to apply for a Federal Court hearing under PIPEDA"
873:
348:
The Personal Health Information Privacy and Access Act
736:"BILL 38 - 2003: PERSONAL INFORMATION PROTECTION ACT"
181:
contains various provisions to facilitate the use of
197:
was adequate to protect the personal information of
141:
130:
125:
117:
109:
99:
91:
50:
34:
841:
389:Limits use and disclosure of personal information
295:collect information by fair and lawful means; and
936:Canada, Office of the Privacy Commissioner of.
894:Canada, Office of the Privacy Commissioner of.
401:Policies and procedures for breaches of privacy
696:. Office of the Privacy Commissioner of Canada
610:PIPEDA Review – Privacy Commissioner of Canada
342:The Personal Health Information Protection Act
8:
620:Section 7, subparagraph (3)(c.1)(ii) of the
568:http://laws-lois.justice.gc.ca/PDF/P-8.6.pdf
527:. Bill C-475 was defeated in January 2014.
501:Office of the Privacy Commissioner of Canada
189:. The act was also intended to reassure the
678:. Gazette.gc.ca. 2002-08-03. Archived from
499:model in which complaints are taken to the
848:. Toronto ON, Canada: Irwin Law. pp.
442:Personal Health Information Protection Act
427:Personal Health Information Protection Act
421:Personal Health Information Protection Act
413:Personal Health Information Protection Act
407:Special rules for employment relationships
398:Designates the role of the Privacy Officer
42:
581:Georgetown Journal of International Law
560:
538:Fighting Internet and Wireless Spam Act
336:The Personal Information Protection Act
330:The Personal Information Protection Act
68:
1033:
1023:
960:
950:
918:
908:
491:does not create an automatic right to
31:
404:Measures for resolution of complaints
392:Limits access to personal information
7:
1051:Dusseault, Pierre-Luc (April 2013).
780:. Department of Justice. 2011-11-17
373:Personal Information Protection Act
360:The Personal Health Information Act
354:The Personal Health Information Act
717:. .publicationsduquebec.gouv.qc.ca
651:"Implementation Schedule - PIPEDA"
444:serves three important functions:
25:
993:"Consumer Privacy Protection Act"
145:John Manley, Minister of Industry
169:) is a Canadian law relating to
653:. Privcom.gc.ca. Archived from
251:gives individuals the right to
1131:The Canadian Privacy Law Blog:
214:Canadian Standards Association
1:
1173:Privacy legislation in Canada
1158:Canadian federal legislation
801:. Canada Gazette. 2012-10-10
379:Notable provisions of PIPA:
366:Memorandum of Understanding
1189:
759:. Qp.gov.ab.ca. March 2007
418:
285:requires organizations to
234:solicitor-client privilege
757:"Alberta Queen's Printer"
137:36th Parliament, Bill C-6
79:Statutory Instruments Act
57:
41:
1060:House of Commons Canada
738:. Leg.bc.ca. 2004-01-01
636:Subsection 9(3) of the
544:Information privacy law
512:Federal Court of Canada
505:Federal Court of Canada
429:, known by its acronym
463:On June 18, 2015, the
166:
83:Statute Revision Act
1153:2000 in Canadian law
257:personal information
195:Canadian privacy law
183:electronic documents
104:Parliament of Canada
52:Parliament of Canada
1163:Information privacy
1097:. openparliament.ca
549:Information privacy
519:Proposed Bill C-475
465:Digital Privacy Act
187:electronic commerce
126:Legislative history
75:Canada Evidence Act
1036:has generic name (
963:has generic name (
921:has generic name (
375:(British Columbia)
332:(British Columbia)
1168:Privacy in Canada
859:978-1-4593-1363-7
199:European citizens
173:. It governs how
149:
148:
27:2000 Canadian law
16:(Redirected from
1180:
1106:
1105:
1103:
1102:
1091:
1085:
1084:
1082:
1081:
1070:
1064:
1063:
1057:
1048:
1042:
1041:
1035:
1031:
1029:
1021:
1019:
1018:
1003:
997:
996:
989:
983:
982:
981:. November 2020.
975:
969:
968:
962:
958:
956:
948:
946:
945:
940:. www.priv.gc.ca
933:
927:
926:
920:
916:
914:
906:
904:
903:
898:. www.priv.gc.ca
891:
885:
884:
882:
881:
870:
864:
863:
847:
837:
831:
830:
828:
827:
816:
810:
809:
807:
806:
795:
789:
788:
786:
785:
774:
768:
767:
765:
764:
753:
747:
746:
744:
743:
732:
726:
725:
723:
722:
711:
705:
704:
702:
701:
690:
684:
683:
676:"Canada Gazette"
672:
666:
665:
663:
662:
647:
641:
633:
627:
618:
612:
607:
601:
595:
589:
588:
576:
570:
565:
110:Assented to
46:
32:
21:
1188:
1187:
1183:
1182:
1181:
1179:
1178:
1177:
1143:
1142:
1115:
1110:
1109:
1100:
1098:
1093:
1092:
1088:
1079:
1077:
1072:
1071:
1067:
1055:
1050:
1049:
1045:
1032:
1022:
1016:
1014:
1005:
1004:
1000:
991:
990:
986:
977:
976:
972:
959:
949:
943:
941:
935:
934:
930:
917:
907:
901:
899:
893:
892:
888:
879:
877:
872:
871:
867:
860:
839:
838:
834:
825:
823:
818:
817:
813:
804:
802:
797:
796:
792:
783:
781:
776:
775:
771:
762:
760:
755:
754:
750:
741:
739:
734:
733:
729:
720:
718:
713:
712:
708:
699:
697:
692:
691:
687:
674:
673:
669:
660:
658:
649:
648:
644:
634:
630:
619:
615:
608:
604:
596:
592:
578:
577:
573:
566:
562:
557:
533:
521:
485:
461:
423:
417:
377:
305:
242:
222:law enforcement
100:Enacted by
95:S.C. 2000, c. 5
87:
84:
67:
66:
28:
23:
22:
15:
12:
11:
5:
1186:
1184:
1176:
1175:
1170:
1165:
1160:
1155:
1145:
1144:
1141:
1140:
1134:
1128:
1123:
1114:
1113:External links
1111:
1108:
1107:
1086:
1065:
1043:
1012:www.priv.gc.ca
998:
984:
970:
928:
886:
865:
858:
832:
811:
790:
769:
748:
727:
706:
685:
682:on 2012-04-19.
667:
642:
628:
613:
602:
597:Section 29 of
590:
571:
559:
558:
556:
553:
552:
551:
546:
541:
532:
529:
520:
517:
484:
481:
460:
457:
456:
455:
452:
449:
419:Main article:
416:
410:
409:
408:
405:
402:
399:
396:
393:
390:
387:
384:
376:
370:
369:
368:
363:
357:
351:
345:
339:
333:
327:
304:
303:Implementation
301:
300:
299:
296:
293:
290:
279:
278:
275:
272:
269:
266:
263:
260:
241:
238:
191:European Union
175:private sector
147:
146:
143:
139:
138:
135:
128:
127:
123:
122:
119:
115:
114:
111:
107:
106:
101:
97:
96:
93:
89:
88:
86:
85:
70:
60:
59:
58:
55:
54:
48:
47:
39:
38:
26:
24:
14:
13:
10:
9:
6:
4:
3:
2:
1185:
1174:
1171:
1169:
1166:
1164:
1161:
1159:
1156:
1154:
1151:
1150:
1148:
1138:
1135:
1132:
1129:
1127:
1124:
1122:
1121:
1117:
1116:
1112:
1096:
1090:
1087:
1075:
1069:
1066:
1061:
1054:
1047:
1044:
1039:
1027:
1013:
1009:
1002:
999:
994:
988:
985:
980:
974:
971:
966:
954:
939:
932:
929:
924:
912:
897:
890:
887:
875:
869:
866:
861:
855:
851:
846:
845:
836:
833:
821:
815:
812:
800:
794:
791:
779:
773:
770:
758:
752:
749:
737:
731:
728:
716:
710:
707:
695:
689:
686:
681:
677:
671:
668:
657:on 2008-09-07
656:
652:
646:
643:
640:
639:
632:
629:
626:
623:
617:
614:
611:
606:
603:
600:
594:
591:
586:
582:
575:
572:
569:
564:
561:
554:
550:
547:
545:
542:
540:
539:
535:
534:
530:
528:
526:
518:
516:
513:
508:
506:
502:
498:
494:
490:
482:
480:
476:
472:
468:
466:
458:
453:
450:
447:
446:
445:
443:
438:
436:
432:
428:
422:
414:
411:
406:
403:
400:
397:
394:
391:
388:
385:
382:
381:
380:
374:
371:
367:
364:
361:
358:
355:
352:
349:
346:
343:
340:
337:
334:
331:
328:
325:
322:
321:
320:
318:
314:
310:
302:
297:
294:
291:
288:
287:
286:
284:
276:
273:
270:
267:
264:
261:
258:
254:
253:
252:
250:
245:
239:
237:
235:
231:
227:
223:
219:
215:
210:
208:
204:
200:
196:
192:
188:
184:
180:
176:
172:
168:
164:
160:
156:
155:
144:
142:Introduced by
140:
136:
133:
129:
124:
120:
116:
113:13 April 2000
112:
108:
105:
102:
98:
94:
90:
82:
78:
74:
69:
65:
64:
56:
53:
49:
45:
40:
37:
33:
30:
19:
1119:
1099:. Retrieved
1089:
1078:. Retrieved
1068:
1059:
1046:
1034:|first=
1015:. Retrieved
1011:
1001:
987:
973:
961:|first=
942:. Retrieved
931:
919:|first=
900:. Retrieved
889:
878:. Retrieved
868:
843:
835:
824:. Retrieved
814:
803:. Retrieved
793:
782:. Retrieved
772:
761:. Retrieved
751:
740:. Retrieved
730:
719:. Retrieved
709:
698:. Retrieved
688:
680:the original
670:
659:. Retrieved
655:the original
645:
637:
631:
621:
616:
605:
593:
584:
580:
574:
563:
536:
524:
522:
509:
488:
486:
477:
473:
469:
464:
462:
441:
439:
430:
426:
424:
412:
378:
372:
365:
359:
353:
347:
341:
335:
329:
323:
317:broadcasting
306:
282:
280:
248:
246:
243:
217:
211:
202:
178:
171:data privacy
158:
153:
152:
150:
80:
76:
71:
61:
35:
29:
1095:"Bill C475"
1076:. cippic.ca
876:. ipc.on.ca
874:"ipc.on.ca"
1147:Categories
1101:2014-12-13
1080:2013-06-26
1017:2020-11-15
944:2015-11-29
902:2015-11-29
880:2012-01-17
826:2018-10-15
805:2012-12-01
784:2012-11-24
763:2012-01-17
742:2012-01-17
721:2012-01-17
700:2018-10-15
661:2012-07-25
587:: 669–693.
555:References
207:Parliament
63:Long title
497:ombudsman
459:Amendment
415:(Ontario)
338:(Alberta)
193:that the
118:Commenced
1026:cite web
953:cite web
911:cite web
531:See also
483:Remedies
326:(Quebec)
309:airlines
240:Overview
230:security
92:Citation
81:and the
625:the act
599:the Act
435:Ontario
313:banking
856:
163:French
159:PIPEDA
77:, the
18:PIPEDA
1056:(PDF)
850:19–20
431:PHIPA
226:legal
134:title
1038:help
965:help
923:help
854:ISBN
487:The
440:The
425:The
315:and
281:The
247:The
151:The
132:Bill
638:Act
622:Act
525:Act
493:sue
489:Act
283:Act
249:Act
218:Act
203:Act
179:Act
1149::
1058:.
1030::
1028:}}
1024:{{
1010:.
957::
955:}}
951:{{
915::
913:}}
909:{{
852:.
585:38
583:.
311:,
236:.
228:,
165::
161:;
1104:.
1083:.
1062:.
1040:)
1020:.
995:.
967:)
947:.
925:)
905:.
883:.
862:.
829:.
808:.
787:.
766:.
745:.
724:.
703:.
664:.
259:;
157:(
20:)
Text is available under the Creative Commons Attribution-ShareAlike License. Additional terms may apply.
