Threats to privacy primarily occur due to new ways in which information is collected and used. Be prepared. Be protected. Understand this important privacy legislation. This Quick Reference explains employer requirements under the federal Personal Information Protection and Electronic Documents Act (PIPEDA). PIPEDA applies to organizations that collect, use, or disclose personal information within a province or territory unless that province or territory has passed legislation similar to the provisions of this Act. The authors have described the overall requirements of PIPEDA, plus its real and potential impact.

NEW IN THE 2023 EDITION

• Discussion and analysis of the growing issue of data collection in the age of the Internet and social media, including a review of the joint privacy investigation into the Tim Hortons digital application.
• Expanded commentary on the outsourcing of personal information processing to non-Canadian entities.
• Further guidance on the importance of incident response plans and privacy impact assessments.
• Significant new commentary on the proposed Bill C-26 – An Act respecting cyber security, amending the Telecommunications Act, and making consequential amendments to other Acts.
• A detailed review of Bill C-27, which would enact three new pieces of privacy legislation: the Consumer Privacy Protection Act, the Personal Information and Data Protections Tribunal Act, and the Artificial Intelligence and Data Act.