Question 1

What is PIPEDA?

Accepted Answer

PIPEDA (Personal Information Protection and Electronic Documents Act) is Canada's federal private-sector privacy law based on 10 fair information principles governing the collection, use, and disclosure of personal information.

Question 2

How does Quebec Law 25 differ from PIPEDA?

Accepted Answer

Quebec Law 25 (effective Sep 2023) is stricter than PIPEDA, requiring privacy impact assessments, a mandatory privacy officer, explicit consent for cross-border transfers, and data portability rights.

Question 3

Is breach notification mandatory in Canada?

Accepted Answer

Yes, since November 2018, PIPEDA requires mandatory breach notification to the Privacy Commissioner and affected individuals when there is a real risk of significant harm.

Frequently Asked Questions