Canadian Privacy Legislation
There is privacy legislation at both the federal and provincial levels in Canada. The main legislation at the federal level is the Personal Information Protection and Electronic Documents Act (PIPEDA).
PIPEDA applies to all organizations including associations, partnerships, individuals, corporations, trade unions, non-profits and charities which collect, use, or disclose personal information: (a) in the course of commercial activities; or (b) in connection with the operation of a federal work, undertaking or business; or (c) which is disclosed to a third-party or in some cases within the same company across a provincial or national boundary.
Principle 1 – Accountability An organization is responsible for personal information under its control and shall designate an individual or individuals who are accountable for the organization’s compliance with the following principles.