Privacy Legislation in Canada

Two federal laws

Canada has two federal privacy laws, the Privacy Act and the Personal Information Protection and Electronic Documents Act. The Privacy Act took effect on July 1, 1983. This Act imposes obligations on some 150 federal government departments and agencies to respect privacy rights by limiting the collection, use and disclosure of personal information. The Privacy Act gives individuals the right to access and request correction of personal information about themselves held by these federal government organizations. Individuals are also protected by the Personal Information Protection and Electronic Documents Act (PIPEDA) that sets out ground rules for how private sector organizations may collect, use or disclose personal information in the course of commercial activities. The law gives individuals the right to access and request correction of the personal information these organizations may have collected about them.

Initially, PIPEDA applied only to personal information about customers or employees that was collected, used or disclosed in the course of commercial activities by the federally regulated private sector, organizations such as banks, airlines, and telecommunications companies. The Act now applies to personal information collected, used or disclosed by the retail sector, publishing companies, the service industry, manufacturers and other provincially regulated organizations.

The Act does not apply to the personal information of employees of these provincially regulated organizations. The federal government may exempt organizations or activities in provinces that have their own privacy laws if they are substantially similar to the federal law. PIPEDA will continue to apply in those provinces to the federally regulated private sector and to personal information in inter-provincial and international transactions by all organizations engaged in commercial activities.

Oversight of both federal Acts rests with the Privacy Commissioner of Canada who is authorized to receive and investigate complaints.

Provincial and Territorial Laws

Every province and territory has privacy legislation governing the collection, use and disclosure of personal information held by government agencies. Newfoundland and Labrador has passed legislation, but it is not yet in force. These acts provide individuals with a general right to access and correct their personal information. Oversight is through either an independent commissioner or ombudsman authorized to receive and investigate complaints.