Canadian PIPEDA
Personal Information Protection and Electronic Documents Act. Federal Canadian private-sector privacy law.
Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (4)
Breach Reporting
| Code | Title |
|---|---|
| s.10.1(1) | Breach Notification to Commissioner |
| s.10.1(3) | Breach Notification to Individuals |
| s.10.1(6) | Real Risk of Significant Harm Factors |
| s.10.2 | Notification to Third Parties |
| s.10.3 | Record Keeping of Breaches |
Enforcement
| Code | Title |
|---|---|
| s.11 | Consent, Justification and Objection |
| s.17 | Documentation |
Fair Information Principle
| Code | Title |
|---|---|
| Principle 4.1 | Accountability |
| Principle 4.1.3 | Accountability for Third Party Transfers |
| Principle 4.1.4 | Privacy Management Program |
| Principle 4.10 | Challenging Compliance |
| Principle 4.2 | Identifying Purposes |
| Principle 4.2.4 | New Purpose Requires New Consent |
| Principle 4.3 | Consent |
| Principle 4.3.4 | Form of Consent |
| Principle 4.3.8 | Consent Withdrawal |
| Principle 4.4 | Limiting Collection |
| Principle 4.5 | Limiting Use, Disclosure, and Retention |
| Principle 4.5.3 | Secure Destruction |
| Principle 4.6 | Accuracy |
| Principle 4.7 | Safeguards |
| Principle 4.7.3 | Categories of Safeguards |
| Principle 4.7.4 | Employee Awareness |
| Principle 4.8 | Openness |
| Principle 4.8.2 | Required Openness Information |
| Principle 4.9 | Individual Access |
| Principle 4.9.4 | Response Timelines |
| Principle 4.9.5 | Correction and Notation |
Other
| Code | Title |
|---|---|
| s.5(3) | Appropriate Purposes |
| s.6.1 | Valid Consent |
| s.7 | Certain Legitimate Uses |
| s.7.3 | Disclosure for Business Transaction |
Frequently Asked Questions
What is Canadian PIPEDA?
Canadian PIPEDA is a compliance framework from Canada with 4 domains and 32 controls. Personal Information Protection and Electronic Documents Act. Federal Canadian private-sector privacy law. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
How many controls does Canadian PIPEDA have?
Canadian PIPEDA has 32 controls organised across 4 domains. The largest domains are Fair Information Principle (21 controls), Breach Reporting (5 controls), Other (4 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
What frameworks does Canadian PIPEDA map to?
Canadian PIPEDA does not currently have cross-framework mappings in our system. Check back as we continuously expand our mapping database.
How do I get started with Canadian PIPEDA compliance?
Start your Canadian PIPEDA compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Canadian PIPEDA requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 32 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 769 frameworks.
Get Started Free →Free forever — no credit card required