Canada Personal Information Protection and Electronic Documents Act (PIPEDA)

Get started

Legislative summary
Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) was enacted in 2000 over the increasing public concerns over personal information practices in the Canadian private sector and established a policy framework for protecting personal information. The act codified a series of privacy principles established in 1996 as a national standard for the collection, use and disclosure of personal information.

The act applies to the collection, use and disclosure of personal information by organizations during commercial activities but does not apply to Canadian government or personal information collected, used or disclosed for personal, household, journalistic, artistic or literary purposes. The act restricts organizations to collecting personal information that is appropriate for the specific transaction being conducted, and these organizations must disclose why they need the information, how they plan to use it and with whom they will share it. Organizations must also obtain consent to collect or share personal information and must make information that they store available to citizens upon request.

HP Application Security Center capabilities

• Assess your web applications for vulnerabilities that may result in disclosure of sensitive or private information
• Verify that links to privacy policies exist at appropriate places in your web applications
• Get detailed security assessment reports categorized by PIPEDA sections

Learn more