Personal Information Protection and Electronic Documents Act
Canada's federal privacy law governing how private-sector organizations collect, use, and disclose personal information in commercial activities. It is built on ten fair information principles, including consent, accountability, and safeguards. It requires reporting breaches that pose a real risk of significant harm to the Privacy Commissioner and affected individuals.