Privacy compliance, before anything goes wrong
Most privacy obligations have nothing to do with a breach. They are the things a regulator expects you to already have in place: somebody accountable, a policy people can read, a reason for what you collect, and a point at which you stop keeping it. These twelve guides cover them.
How to Conduct a Privacy Impact Assessment in Canada
Step-by-step guide to completing a privacy impact assessment for Canadian organizations under PIPEDA, Alberta PIPA, and BC PIPA.
PIPEDA · AB PIPA · BC PIPA
How to Write a Privacy Policy for a Canadian Business
Your privacy policy must describe your actual practices, a mismatched template may itself be a PIPEDA violation. Ten required elements.
PIPEDA · AB PIPA · BC PIPA
Personal Information Retention and Destruction Under Canadian Privacy Law
How long Canadian businesses must keep personal information, when it has to be destroyed, and what secure destruction actually requires.
PIPEDA · AB PIPA · BC PIPA
Responding to Individual Access Requests Under Canadian Privacy Law
How Canadian organizations must respond to access requests under PIPEDA and PIPA, timelines, grounds for refusal, and common mistakes.
PIPEDA · AB PIPA · BC PIPA
Do I Need a Designated Privacy Officer? What Canadian Privacy Law Requires
PIPEDA, Alberta PIPA, and BC PIPA all require a designated privacy officer, here is what the obligation means for small organizations.
PIPEDA · AB PIPA · BC PIPA
PIPEDA Compliance Checklist for Canadian Organizations
Ten-principle checklist for assessing your PIPEDA compliance, each obligation stated as a concrete yes/no question with actionable next steps.
PIPEDA
Do I Need a Written Privacy Policy? What Canadian Privacy Law Requires
PIPEDA, Alberta PIPA, and BC PIPA all require a written privacy policy, here is what it must contain and where to post it.
PIPEDA · AB PIPA · BC PIPA
Canadian Privacy Compliance Resources Are Written for Experts. Here's What That Means for Your Organization.
PIPEDA guidance is authoritative and free, but applying it correctly takes legal interpretation most Canadian businesses do not have.
PIPEDA · AB PIPA · BC PIPA
What to Do When You Receive a PIPEDA Privacy Complaint
The steps a Canadian business takes when someone complains about its handling of personal information, and what happens if the OPC gets involved.
PIPEDA · AB PIPA · BC PIPA
Do You Need a Privacy Impact Assessment? A Guide for Canadian Organizations
When a privacy impact assessment is required versus recommended under PIPEDA, and how Canadian organizations conduct one.
PIPEDA · AB PIPA · BC PIPA
Sample Privacy Complaint Handling Procedure
A free sample privacy complaint handling procedure under PIPEDA, Alberta PIPA, and BC PIPA, ready to adapt for your organization.
PIPEDA · AB PIPA · BC PIPA
What ClearBreach Generates
Three assessments: a breach produces six documents, an annual compliance assessment seven, and a privacy impact assessment one PIA.
PIPEDA · AB PIPA · BC PIPA