PIPEDA legislation and related regulations
About this legislation
The Personal Information Protection and Electronic Documents Act (PIPEDA) is the federal privacy law for private-sector organizations. It sets out the ground rules for how businesses must handle personal information in the course of their commercial activity.
For more information about the application of PIPEDA, please read our PIPEDA in brief page.
Schedule 1 of PIPEDA contains 10 fair information principles. These principles are referred to throughout the Act.
Administration
Privacy Commissioner of Canada — The Office oversees compliance with PIPEDA. Canadians may complain to the Commissioner about any matter specified in section 11 of PIPEDA. The Commissioner may also personally initiate a complaint.
Innovation, Science and Economic Development Canada (ISED) - The Minister of ISED is responsible for PIPEDA. The minister recommends to the Governor in Council the adoption of Orders in Council under the Act and tables Government bills in Parliament to amend the Act.
Related acts and legislation
Several provincial laws have been deemed substantially similar to the PIPEDA. Under paragraph 26(2)(b), the Governor in Council can exempt an organization or class of organizations, an activity or a class of activities from PIPEDA if the collection, use or disclosure of personal information occurs within a province that has legislation that has been deemed substantially similar to the PIPEDA. This means that wherever the substantially similar provincial law applies, that law applies instead of PIPEDA.
- Provincial laws that may apply instead of PIPEDA
- Canada's anti-spam legislation
- The Digital Privacy Act and PIPEDA
Related topics
- Overview of privacy legislation in Canada
- Investigations into businesses
- PIPEDA interpretation bulletins
- The Application of PIPEDA to Charitable and Non-Profit Organizations
- The Application of PIPEDA to Municipalities, Universities, Schools, and Hospitals
- Leading by Example: Key developments in the first seven years of the Personal Information Protection and Electronic Documents Act
Additional help
- Guidance documents to help you comply with PIPEDA
- PIPEDA interpretation bulletins
- Privacy Guide for Businesses
- Contact the Office of the Privacy Commissioner of Canada
- Enforcement information
- Applying paragraphs 7(3)(d.1) and 7(3)(d.2) of PIPEDA
- How PIPEDA applies to the creation and use of electronic documents
- Backgrounder on the Personal Information Protection and Electronic Documents Act
- Best Practices for dealing with pre-PIPEDA personal information (grandfathering)
Read the legislation
An Act to support and promote electronic commerce by protecting personal information that is collected, used or disclosed in certain circumstances, by providing for the use of electronic means to communicate or record information or transactions and by amending the Canada Evidence Act, the Statutory Instruments Act and the Statute Revision Act.
His Majesty, by and with the advice and consent of the Senate and House of Commons of Canada enacts as follows:
The complete version of PIPEDA that received Royal Assent on April 13, 2000.
Regulations and orders under this Act
- Breach of Security Safeguards Regulations (SOR/2018-64)
- Electronic Alternatives Regulations for the Purposes of Subsection 254(1) of the Canada Labour Code (SOR/2008-115)
- Electronic Alternatives Regulations for the Purposes of the Federal Real Property and Federal Immovables Act (SOR/2004-308)
- Health Information Custodians in the Province of Ontario Exemption Order (SOR/2005-399)
- Investigative Bodies, Regulations Specifying [Repealed] (SOR/2001-6)
- Order Binding Certain Agents of Her Majesty for the Purposes of Part 1 of the Personal Information Protection and Electronic Documents Act (SOR/2001-8)
- Organizations in the Province of Alberta Exemption Order (SOR/2004-219)
- Organizations in the Province of British Columbia Exemption Order (SOR/2004-220)
- Organizations in the Province of Quebec Exemption Order (SOR/2003-374)
- Personal Health Information Custodians in New Brunswick Exemption Order (SOR/2011-265)
- Personal Health Information Custodians in Newfoundland and Labrador Exemption Order (SI/2012-72)
- Personal Health Information Custodians in Nova Scotia Exemption Order (SOR/2016-62)
- Publicly Available Information, Regulations Specifying (SOR/2001-7)
- Secure Electronic Signature Regulations (SOR/2005-30)
Legislative change and review
Under section 29 of PIPEDA, the Act must be reviewed by the committee of the House of Commons or by both houses of Parliament every five years. The introduction of, or changes to, related legislation can also result in amendments to PIPEDA.
OPC recommendations and consultations
As part of its mandate, the OPC holds consultations, conducts reviews and makes recommendations relating to PIPEDA. These actions help ensure that PIPEDA remains relevant and effective.
- Date modified: