Regulations › Rest of world › Canada
PIPEDA
Personal Information Protection and Electronic Documents Act (Canada)
WhenIn effect since 1 January 2001
Who enforces itOffice of the Privacy Commissioner of Canada
Who it applies toPrivate-sector organizations handling personal information in commercial activity, outside provinces with substantially similar laws.
Tell the regulatorReport to the Commissioner as soon as feasible if a breach creates a real risk of significant…
DPO requiredEvery organization must designate an individual accountable for compliance
RegistrationNot addressed
Transfers abroadOrganization remains accountable and must use contracts or other means to ensure comparable pr…
Request deadlineRespond within 30 days, extendable by up to 30 more days
Maximum fineFines up to CAD 100,000 on indictment (CAD 10,000 summary) for knowing breach-reporting and li…
Recent developments
Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.
Regulations library
Every US state privacy law, on one map
24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.
- In force
- Coming into force
- Sector laws