Canada

The Personal Information Protection and Electronic Documents Act (PIPEDA) is the major federal legislation governing the privacy of the private sector in Canada and is regulated by Innovation, Science and Economic Development Canada (ISED), while being enforced by the Office of the Privacy Commissioner of Canada (OPC). It provides guidelines for the way companies gather, use, and share private information. Based on 10 Fair Information Principles, it obliges companies to ensure the provision of proper consent from consumers, to specify the reasons for the information collection, to develop strong organizational measures, and also to allow people to get access to the information about themselves and to change it. Data security under PIPEDA cannot be delegated.