Overview
PIPEDA applies to private-sector organizations across Canada that handle personal information. It establishes 10 principles of fair information practices, including accountability, consent, transparency, and safeguards for data protection. Key provisions govern consent for data collection, reporting of data breaches, and investigation of complaints by the Privacy Commissioner. Notably, it incorporates principles from the National Standard of Canada, CAN/CSA-Q830-96. It also includes transitional and electronic document-related provisions. PIPEDA does not apply to government institutions or data collected for personal or journalistic purposes. Organizations must comply with specific conditions if they collect, use, or disclose personal information without consent.