Home > News > Federal breach notification law now in effect in Canada

Federal breach notification law now in effect in Canada

The breach notification provisions of Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) went into effect Nov. 1, 2018. PIPEDA places requirements and restrictions on an entity’s collection and use of “personal information,” defined as information about an identifiable individual, in the course of a commercial activity. All organizations that collect and use personal information belonging to Canadians must comply with PIPEDA’s requirements. This includes consumer/customer data, as well as employee data. The law has been in force since 2001 and was amended in 2015 to include breach notification requirements, though the 2015 breach notification amendments made as a result of the Digital Privacy Act were not immediately effective. Those amendments are now effective.