Which privacy law applies to you
This is the question that comes before every other one, and the answer turns on where you operate rather than what you do for a living. Alberta and British Columbia have their own private-sector Acts. Everywhere else in Canada, PIPEDA is the one that reaches commercial activity. Quebec has its own and it is outside what this product assesses.
PIPEDA Compliance Requirements for Canadian Organizations
The ten ongoing compliance obligations every private-sector organization must meet under PIPEDA, regardless of size, industry, or province.
PIPEDA
Which Canadian Privacy Law Applies to Your Business?
PIPEDA applies to most Canadian businesses. In Alberta and BC, provincial PIPA may apply instead, and a different regulator governs.
PIPEDA · AB PIPA · BC PIPA
Which Privacy Law Applies to My Alberta Business?
Alberta businesses are subject to Alberta PIPA for provincial activity and PIPEDA for cross-border, both frameworks apply to the same organization.
PIPEDA · AB PIPA
Which Privacy Law Applies to My BC Business?
BC businesses and non-profits are subject to BC PIPA for provincial activity and PIPEDA for cross-border, both frameworks apply.
PIPEDA · BC PIPA
Which Privacy Law Applies to My Ontario Business?
Ontario has no provincial privacy law equivalent to Alberta or BC PIPA, PIPEDA governs all commercial activity in Ontario.
PIPEDA
Alberta PIPA Compliance Requirements: What Alberta Businesses Must Do
What Alberta private-sector organizations must have in place under PIPA, and what the OIPC expects to find during an investigation.
AB PIPA
BC PIPA Compliance Requirements: What BC Businesses and Non-Profits Must Do
BC PIPA is the only Canadian private-sector privacy law that covers non-profits, what every BC business, charity, and association must have in place.
BC PIPA
PIPEDA Compliance Requirements for Ontario Organizations
How Ontario private-sector organizations meet their PIPEDA compliance obligations, one regulator, one framework, and what the OPC expects to find.
PIPEDA
Ontario Data Breach Reporting Requirements
Ontario has no provincial privacy law, PIPEDA governs all Ontario private-sector breach reporting. When to report, who to notify, what to keep.
PIPEDA
Alberta PIPA Breach Notification: What Alberta Organizations Must Do
Unlike BC PIPA, Alberta PIPA makes both regulator reporting and individual notification mandatory when real risk of significant harm exists.
AB PIPA
BC PIPA Breach Reporting: What BC Businesses Must Do
When a BC business must notify individuals after a privacy breach, when the OIPC should hear about it, and the records to keep.
BC PIPA
PIPEDA Breach Reporting Requirements for Canadian Organizations
PIPEDA requires OPC reporting, individual notification, and a 24-month breach record when real risk of significant harm is present.
PIPEDA