PIPEDA

Also known as: S.C. 2000, c. 5, LPRPDE, Canadian privacy act, Personal Information Protection and Electronic Documents Act

Personal Information Protection and Electronic Documents Act (S.C. 2000, c. 5) — Parliament of Canada / OPC (Office of the Privacy Commissioner of Canada)

Official site Official change log

Canada's federal private-sector privacy law. It binds any organisation that collects, uses or discloses personal information in the course of commercial activity, including organisations outside Canada that handle personal information of people in Canada. For a security team the sharp end is the breach regime: an organisation must report a breach of security safeguards that poses a real risk of significant harm to the Privacy Commissioner, notify the affected individuals, and keep a record of every breach — which turns an incident into a filing obligation with a deadline.

Subscribe to PIPEDA (RSS)

Timeline

No changes recorded yet — we are watching, and nothing has been published.

Monitoring

Watched by 1 official source. Watching since 20 September 2026.