Canada · Privacy & Data Protection

The country's own data-protection regime, registration duties, and its official supervisory authority.

AI-drafted, editorially reviewed. Confirm specifics with the official authority.

In Canada, private-sector privacy is governed federally by PIPEDA (with substantially-similar provincial laws in some provinces), overseen by the Office of the Privacy Commissioner of Canada (OPC). Organisations must obtain meaningful consent, protect personal information, give individuals access, and report breaches that pose a real risk of significant harm.

  • Obtain meaningful consent to collect, use or disclose personal information under PIPEDA.
  • Safeguard personal information and give individuals access to their data.
  • Report breaches posing a real risk of significant harm to the OPC and affected individuals.

Government portals

This topic in other countries

← Back to Canada