PrivacyTerrain

Editorial caveat

Structured values summarize official materials for research and planning. They are reviewed by humans before publication and should not be treated as legal advice.

medium confidence, Public comparison should distinguish PIPEDA from substantially similar provincial private-sector laws and separate public-sector frameworks.

At a glance

Key presentation points

A compact summary of high-signal fields before the full structured record.

Effective statusin-force1 primary + 1 secondary • Reviewed 17/04/2026

Territorial scopeApplies to personal information collected, used, or disclosed in the course of commercial activities in Canada, subject to provincial carve-outs.1 primary + 1 secondary • Reviewed 17/04/2026

Regulator or enforcement authority summaryOPC Canada and some provincial authorities1 primary • Reviewed 17/04/2026

Requires legal basisNo1 primary + 1 secondary • Reviewed 17/04/2026

Structured record

Regulation details grouped by topic

Each value keeps its field context, linked sources, notes, and review date together to avoid detached or ambiguous statements.

Identity

Effective status: in-forceSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: PIPEDA text (primary); Office of the Privacy Commissioner guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Law status: activeSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: PIPEDA text (primary); Office of the Privacy Commissioner guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Effective date: 2001-01-01Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: PIPEDA text (primary); Office of the Privacy Commissioner guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Last amended: 2018-11-01Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: PIPEDA text (primary); Office of the Privacy Commissioner guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.

Scope

Extraterritorial application: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: PIPEDA text (primary); Office of the Privacy Commissioner guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Territorial scope: Applies to personal information collected, used, or disclosed in the course of commercial activities in Canada, subject to provincial carve-outs.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: PIPEDA text (primary); Office of the Privacy Commissioner guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Private sector coverage: Federal private-sector organizations engaged in commercial activities, unless substantially similar provincial law applies.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: PIPEDA text (primary); Office of the Privacy Commissioner guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Public sector coverage: Federal public-sector privacy obligations are governed separately under the Privacy Act.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: PIPEDA text (primary); Office of the Privacy Commissioner guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.

Definitions

Personal data definition: Personal information means information about an identifiable individual.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: PIPEDA text (primary); Office of the Privacy Commissioner guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Sensitive data recognized: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: PIPEDA text (primary); Office of the Privacy Commissioner guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.

Legal Basis

Legal bases: consent, statutory exception, reasonable purposeSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: PIPEDA text (primary); Office of the Privacy Commissioner guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Requires legal basis: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: PIPEDA text (primary); Office of the Privacy Commissioner guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.

Rights

Right of access: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: PIPEDA text (primary); Office of the Privacy Commissioner guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Right to deletion: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: PIPEDA text (primary); Office of the Privacy Commissioner guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Right to object: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: PIPEDA text (primary); Office of the Privacy Commissioner guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Right to portability: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: PIPEDA text (primary); Office of the Privacy Commissioner guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Right to appeal: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: PIPEDA text (primary); Office of the Privacy Commissioner guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Right to erasure or delete summary: No broad federal erasure rightSupport: 1 primary • Reviewed 17/04/2026Sources: PIPEDA text (primary)Note: Canada is better described as lacking a simple broad federal erasure right under PIPEDA.
Right to rectification or correction summary: Correction rightSupport: 1 primary • Reviewed 17/04/2026Sources: PIPEDA text (primary)Note: Canada provides correction rights under its federal private-sector framework.

Breach

Breach deadline (hours): 0Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: PIPEDA text (primary); Office of the Privacy Commissioner guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Breach notification required: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: PIPEDA text (primary); Office of the Privacy Commissioner guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.

Governance

DPO required: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: PIPEDA text (primary); Office of the Privacy Commissioner guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Impact assessment required: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: PIPEDA text (primary); Office of the Privacy Commissioner guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Records of processing required: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: PIPEDA text (primary); Office of the Privacy Commissioner guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.

Enforcement

Maximum fine: PIPEDA historically relies more on ombudsman-style enforcement than large administrative fines.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: PIPEDA text (primary); Office of the Privacy Commissioner guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Private right of action: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: PIPEDA text (primary); Office of the Privacy Commissioner guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Regulator or enforcement authority summary: OPC Canada and some provincial authoritiesSupport: 1 primary • Reviewed 17/04/2026Sources: PIPEDA text (primary)Note: Canada's enforcement picture includes the federal OPC and, in some cases, provincial privacy regulators.

Transfers

Cross-border transfer restricted: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: PIPEDA text (primary); Office of the Privacy Commissioner guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Data localization required: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: PIPEDA text (primary); Office of the Privacy Commissioner guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.

Marketing

Cookie consent rule: Consent analysis is contextual and shaped by OPC guidance on online tracking and meaningful consent.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: PIPEDA text (primary); Office of the Privacy Commissioner guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.

Official sources

PIPEDA textPrimary official law • en • html
Office of the Privacy Commissioner guidanceSecondary official material • en • html

Canada