PIPEDA is Canada's federal law governing how private-sector organizations handle personal information — most business websites collecting customer data fall under it.
The Basics to Cover
Obtain meaningful consent before collecting personal information, clearly explain what you collect and why in a privacy policy, only collect what's genuinely necessary, and secure the data you hold appropriately.
Individual Rights
Customers have the right to access their personal information and request corrections — your process for handling these requests should be documented and genuinely followed.
Español
Deutsch