Personal Information Protection and Electronic Documents Act — Canada's federal private-sector privacy law.
PIPEDA governs how private-sector organizations collect, use, and disclose personal information in the course of commercial activities. It is built on ten fair information principles derived from the CSA Model Code.
PIPEDA requires organizations to obtain meaningful consent, limit collection to what is necessary, protect personal information with appropriate safeguards, and allow individuals to access and correct their information. Breach notification requirements were added in 2018.