How does Canada treat personal information? Juggling between provincial legislations and federal laws, Canada has chosen a flexible model that allows adaptation while protecting sensitive data.
#PIPEDA #dataProtection, #privacy #digitalLaws #canada #dataPrivacy
negativepid.blog/pipeda-canad...
#PIPEDA #dataProtection, #privacy #digitalLaws #canada #dataPrivacy
negativepid.blog/pipeda-canad...
PIPEDA, Canada’s approach to PI - PID Perspectives
In Canada, the Personal Information Protection and Electronic Documents Act, also known as PIPEDA, establishes the national standard for how private-sector
negativepid.blog
December 10, 2025 at 4:40 AM
How does Canada treat personal information? Juggling between provincial legislations and federal laws, Canada has chosen a flexible model that allows adaptation while protecting sensitive data.
#PIPEDA #dataProtection, #privacy #digitalLaws #canada #dataPrivacy
negativepid.blog/pipeda-canad...
#PIPEDA #dataProtection, #privacy #digitalLaws #canada #dataPrivacy
negativepid.blog/pipeda-canad...
** Not to say PIPEDA never covers health data. Intended use purpose, definitions of care under applicable law and involvement without a regulatory custodian may make a difference…
December 9, 2025 at 2:20 AM
** Not to say PIPEDA never covers health data. Intended use purpose, definitions of care under applicable law and involvement without a regulatory custodian may make a difference…
Not to say PIPEDA couldn’t use an update, but if that’s the law holding you back, you’re out of touch with Canadian health care, and give up any hopes of speeding up “innovation” to get into the European market; you’ll never survive.
December 9, 2025 at 2:14 AM
Not to say PIPEDA couldn’t use an update, but if that’s the law holding you back, you’re out of touch with Canadian health care, and give up any hopes of speeding up “innovation” to get into the European market; you’ll never survive.
PIPEDA : Private sector privacy law. Is overturned when other “substantially similar” laws are in place.
PIPA(NS), PIPA (NFLD), PHIPA (ON), HIA (AB), HIA (PEI) et al. = substantially similar legislation.
PIPA(NS), PIPA (NFLD), PHIPA (ON), HIA (AB), HIA (PEI) et al. = substantially similar legislation.
December 9, 2025 at 2:06 AM
PIPEDA : Private sector privacy law. Is overturned when other “substantially similar” laws are in place.
PIPA(NS), PIPA (NFLD), PHIPA (ON), HIA (AB), HIA (PEI) et al. = substantially similar legislation.
PIPA(NS), PIPA (NFLD), PHIPA (ON), HIA (AB), HIA (PEI) et al. = substantially similar legislation.
“Canada’s health data system is stuck in the 1990s: The 25-year-old Personal Information Protection and Electronic Documents Act (PIPEDA)…”
I’m gonna stop you right there….
I’m gonna stop you right there….
*from behind the healthcare system data curtain*
How we handle health data is genuinely insane. It feels like the 1990s. It's inproving, but unevenly and slowly overall.
substack.com/@missingmidd...
How we handle health data is genuinely insane. It feels like the 1990s. It's inproving, but unevenly and slowly overall.
substack.com/@missingmidd...
Health Innovation Doesn’t Have to Be This Hard
Outdated rules are holding Canada back.
substack.com
December 9, 2025 at 2:01 AM
“Canada’s health data system is stuck in the 1990s: The 25-year-old Personal Information Protection and Electronic Documents Act (PIPEDA)…”
I’m gonna stop you right there….
I’m gonna stop you right there….
Yep. You’ve got three acts that potentially apply: PHIA (health), FOIPOP (for NS government), and PIPEDA (private sector).
Which act applies depends on the details of who is the party processing the information (& purpose if for health), but all have the right to amend inaccurate information.
Which act applies depends on the details of who is the party processing the information (& purpose if for health), but all have the right to amend inaccurate information.
December 6, 2025 at 9:59 PM
Yep. You’ve got three acts that potentially apply: PHIA (health), FOIPOP (for NS government), and PIPEDA (private sector).
Which act applies depends on the details of who is the party processing the information (& purpose if for health), but all have the right to amend inaccurate information.
Which act applies depends on the details of who is the party processing the information (& purpose if for health), but all have the right to amend inaccurate information.
Canada: Bill including PIPEDA amendments passes first reading.
Bill C-5 includes amendments to PIPEDA regarding a data mobility framework with exceptions to the framework for the protection of proprietary commercial information.
Read now: https://bit.ly/4ovi8zT
Bill C-5 includes amendments to PIPEDA regarding a data mobility framework with exceptions to the framework for the protection of proprietary commercial information.
Read now: https://bit.ly/4ovi8zT
December 1, 2025 at 6:08 PM
Canada: Bill including PIPEDA amendments passes first reading.
Bill C-5 includes amendments to PIPEDA regarding a data mobility framework with exceptions to the framework for the protection of proprietary commercial information.
Read now: https://bit.ly/4ovi8zT
Bill C-5 includes amendments to PIPEDA regarding a data mobility framework with exceptions to the framework for the protection of proprietary commercial information.
Read now: https://bit.ly/4ovi8zT
⚠️Phishing emails don’t start in your inbox—they start with your data trail. ⚠️From scraped pages to digital breadcrumbs, our new blog by Annie Markarian explores how consent, control, and Canadian law intersect online. #Cybersecurity #DataScraping #PIPEDA
www.cippic.ca/post/how-saf...
www.cippic.ca/post/how-saf...
How Safe is our Information Online? One Email Changed how I share my data.
On Thanksgiving Monday, I received an email from CIPPIC’s Director, Professor David Fewer, asking me for an urgent favour. The name matched and the tone seemed professional, but something was off—the ...
www.cippic.ca
December 1, 2025 at 3:14 PM
⚠️Phishing emails don’t start in your inbox—they start with your data trail. ⚠️From scraped pages to digital breadcrumbs, our new blog by Annie Markarian explores how consent, control, and Canadian law intersect online. #Cybersecurity #DataScraping #PIPEDA
www.cippic.ca/post/how-saf...
www.cippic.ca/post/how-saf...
On November 4, 2025, the federal government introduced Bill C-15, including the establishment of a data mobility framework. Additionally, according to Minister Solomon in La Presse, further PIPEDA reform is scheduled to be tabled in December.
November 28, 2025 at 4:23 PM
On November 4, 2025, the federal government introduced Bill C-15, including the establishment of a data mobility framework. Additionally, according to Minister Solomon in La Presse, further PIPEDA reform is scheduled to be tabled in December.
Third, it amends PIPEDA, the private sector privacy law, by adding a new data mobility right.
November 19, 2025 at 4:35 PM
Third, it amends PIPEDA, the private sector privacy law, by adding a new data mobility right.
Silent cyber threats: How shadow AI could undermine Canada’s digital health defences
#Canada #Tech #Health #AI #Cybersecurity #DigitalHealth #ShadowAI #HealthPrivacy #DataProtection #Healthcare #PatientSafety #TechRisks #MedicalData #AIRegulation #PIPEDA
the-14.com/silent-cyber...
#Canada #Tech #Health #AI #Cybersecurity #DigitalHealth #ShadowAI #HealthPrivacy #DataProtection #Healthcare #PatientSafety #TechRisks #MedicalData #AIRegulation #PIPEDA
the-14.com/silent-cyber...
Silent cyber threats: How shadow AI could undermine Canada’s digital health defences | The-14
Shadow AI use by clinicians risks silent leaks of sensitive patient data, exposing gaps in Canada’s digital health defences and requiring urgent oversight today
the-14.com
November 18, 2025 at 11:25 PM
Silent cyber threats: How shadow AI could undermine Canada’s digital health defences
#Canada #Tech #Health #AI #Cybersecurity #DigitalHealth #ShadowAI #HealthPrivacy #DataProtection #Healthcare #PatientSafety #TechRisks #MedicalData #AIRegulation #PIPEDA
the-14.com/silent-cyber...
#Canada #Tech #Health #AI #Cybersecurity #DigitalHealth #ShadowAI #HealthPrivacy #DataProtection #Healthcare #PatientSafety #TechRisks #MedicalData #AIRegulation #PIPEDA
the-14.com/silent-cyber...
Even if this is legal, IMHO it violates the spirit of PIPEDA.
November 18, 2025 at 8:25 PM
Even if this is legal, IMHO it violates the spirit of PIPEDA.
Have you signed up yet? 👀🤔 If you have a business that collects personal information, you must attend Privacy & Your Business: An Introduction to PIPEDA. 🔏
RSVP Here: locarius.io/events/3122/...
Learn firsthand about the act from the Office of the Privacy Commissioner of Canada!
RSVP Here: locarius.io/events/3122/...
Learn firsthand about the act from the Office of the Privacy Commissioner of Canada!
Do you have a new or growing business that collects personal information?
Join the Office of the Privacy Commissioner of Canada for “Privacy and Your Business: An Introduction to PIPEDA”, on Nov 21, 10:30–12 at The Foundry.
RSVP today: locarius.io/events/3122/...
Join the Office of the Privacy Commissioner of Canada for “Privacy and Your Business: An Introduction to PIPEDA”, on Nov 21, 10:30–12 at The Foundry.
RSVP today: locarius.io/events/3122/...
Privacy and Your Business: An Introduction to PIPEDA
Do you have a new or growing business in Canada that collects personal
information?
Join the Office of the Privacy Commissioner of Canada (OPC) for Privacy and Your
Business: An Introduction to PIP...
locarius.io
November 17, 2025 at 12:54 PM
Have you signed up yet? 👀🤔 If you have a business that collects personal information, you must attend Privacy & Your Business: An Introduction to PIPEDA. 🔏
RSVP Here: locarius.io/events/3122/...
Learn firsthand about the act from the Office of the Privacy Commissioner of Canada!
RSVP Here: locarius.io/events/3122/...
Learn firsthand about the act from the Office of the Privacy Commissioner of Canada!
Super interesting development. Was looking into privacy laws on these kinds of review sites a while ago. OPC has addressed under PIPEDA (also a RateMDs case, as BCCA cites), but wd be helpful to have similar gap closed under equiv prov legis like BC PIPA. (This case is Privacy Act, but a step twds?)
Can doctors claim a privacy violation because RateMDs creates profiles and ranks them without consent? The BC Court of Appeal says no. Civil #privacy claims require information that’s really “private”. New on my YouTube channel: youtu.be/AqmvwTs0qAA
Online reviews and privacy claims: Lessons from RateMDs v Bluler (BCCA)
YouTube video by PrivacyLawyer - David Fraser
youtu.be
November 17, 2025 at 12:30 AM
Super interesting development. Was looking into privacy laws on these kinds of review sites a while ago. OPC has addressed under PIPEDA (also a RateMDs case, as BCCA cites), but wd be helpful to have similar gap closed under equiv prov legis like BC PIPA. (This case is Privacy Act, but a step twds?)
Preeeeetty sure this goes beyond the 30 days notification time under PIPEDA.
Man who died 18 years ago among NS Power customers who were told data was stolen #NovaScotia
/1 thread
www.ctvnews.ca/atlantic/nov...
/1 thread
www.ctvnews.ca/atlantic/nov...
Man who died 18 years ago among NS Power customers who were told data was stolen
As more Nova Scotians are being told their data was stolen as part of the massive Nova Scotia Power cyberattack back in March, frustration is mounting about how the utility has handled the situation.
www.ctvnews.ca
November 15, 2025 at 11:20 AM
Preeeeetty sure this goes beyond the 30 days notification time under PIPEDA.
Key highlights:
• AES-256 encryption for all stored data
• Zero-knowledge architecture — we can’t read your stuff
• Offline-first design — works even without internet
• No tracking, no analytics, no data collection
• Fully open-source & 🇨🇦 PIPEDA-compliant
2/3👇
• AES-256 encryption for all stored data
• Zero-knowledge architecture — we can’t read your stuff
• Offline-first design — works even without internet
• No tracking, no analytics, no data collection
• Fully open-source & 🇨🇦 PIPEDA-compliant
2/3👇
Feature Spotlight: Privacy & Security Architecture
Practical tools and community for injured workers and persons with disabilities.
3mpwrapp.pages.dev
November 13, 2025 at 10:39 PM
Key highlights:
• AES-256 encryption for all stored data
• Zero-knowledge architecture — we can’t read your stuff
• Offline-first design — works even without internet
• No tracking, no analytics, no data collection
• Fully open-source & 🇨🇦 PIPEDA-compliant
2/3👇
• AES-256 encryption for all stored data
• Zero-knowledge architecture — we can’t read your stuff
• Offline-first design — works even without internet
• No tracking, no analytics, no data collection
• Fully open-source & 🇨🇦 PIPEDA-compliant
2/3👇
Do you have a new or growing business that collects personal information?
Join the Office of the Privacy Commissioner of Canada for “Privacy and Your Business: An Introduction to PIPEDA”, on Nov 21, 10:30–12 at The Foundry.
RSVP today: locarius.io/events/3122/...
Join the Office of the Privacy Commissioner of Canada for “Privacy and Your Business: An Introduction to PIPEDA”, on Nov 21, 10:30–12 at The Foundry.
RSVP today: locarius.io/events/3122/...
Privacy and Your Business: An Introduction to PIPEDA
Do you have a new or growing business in Canada that collects personal
information?
Join the Office of the Privacy Commissioner of Canada (OPC) for Privacy and Your
Business: An Introduction to PIP...
locarius.io
November 13, 2025 at 6:36 PM
Do you have a new or growing business that collects personal information?
Join the Office of the Privacy Commissioner of Canada for “Privacy and Your Business: An Introduction to PIPEDA”, on Nov 21, 10:30–12 at The Foundry.
RSVP today: locarius.io/events/3122/...
Join the Office of the Privacy Commissioner of Canada for “Privacy and Your Business: An Introduction to PIPEDA”, on Nov 21, 10:30–12 at The Foundry.
RSVP today: locarius.io/events/3122/...
anywho, more of this instead plz "Canada's PIPEDA should be amended to include clauses specifically aimed at protecting the privacy of [Indigenous Peoples]. This should include an amended definition of personal information that reflects its relevance in Indigenous contexts" iapp.org/news/a/data-...
IAPP
iapp.org
November 12, 2025 at 10:25 PM
anywho, more of this instead plz "Canada's PIPEDA should be amended to include clauses specifically aimed at protecting the privacy of [Indigenous Peoples]. This should include an amended definition of personal information that reflects its relevance in Indigenous contexts" iapp.org/news/a/data-...
US data storage companies that handle the personal information of individuals in Canada in the course of commercial activities must comply with applicable Canadian privacy laws, primarily the federal PIPEDA, or substantially similar provincial laws.
November 12, 2025 at 7:49 PM
US data storage companies that handle the personal information of individuals in Canada in the course of commercial activities must comply with applicable Canadian privacy laws, primarily the federal PIPEDA, or substantially similar provincial laws.
Lost in Budget 2025 is that the government promised a data mobility right in PIPEDA. This comes at same time that AI Minister Evan Solomon has said he will lead on a new privacy bill in Canada. Is the privacy reform a new bill (as in C-27) or tweaks to PIPEDA?
budget.canada.ca/2025/report-...
budget.canada.ca/2025/report-...
November 5, 2025 at 7:28 PM
Lost in Budget 2025 is that the government promised a data mobility right in PIPEDA. This comes at same time that AI Minister Evan Solomon has said he will lead on a new privacy bill in Canada. Is the privacy reform a new bill (as in C-27) or tweaks to PIPEDA?
budget.canada.ca/2025/report-...
budget.canada.ca/2025/report-...
Think of your website as a digital house. For Canadian governments, schools, hospitals, and enterprises, where that house sits matters. 🏠🇨🇦
Learn why data residency, PIPEDA compliance, and local infrastructure are key to secure, high-performing WordPress hosting.
🔗 ow.ly/nci050Xn1h0
Learn why data residency, PIPEDA compliance, and local infrastructure are key to secure, high-performing WordPress hosting.
🔗 ow.ly/nci050Xn1h0
November 5, 2025 at 11:43 AM
Think of your website as a digital house. For Canadian governments, schools, hospitals, and enterprises, where that house sits matters. 🏠🇨🇦
Learn why data residency, PIPEDA compliance, and local infrastructure are key to secure, high-performing WordPress hosting.
🔗 ow.ly/nci050Xn1h0
Learn why data residency, PIPEDA compliance, and local infrastructure are key to secure, high-performing WordPress hosting.
🔗 ow.ly/nci050Xn1h0
If the BQ decide to be the federalist heroes, the rest of Canada would get:
-- improved privacy protections (over and above PIPEDA);
-- improved social cohesion (like obligations to help your neighbours); and
-- a new anchor that keeps Liberals from moving the Overton Window to woo Maple MAGAts.
/3
-- improved privacy protections (over and above PIPEDA);
-- improved social cohesion (like obligations to help your neighbours); and
-- a new anchor that keeps Liberals from moving the Overton Window to woo Maple MAGAts.
/3
November 3, 2025 at 9:47 PM
If the BQ decide to be the federalist heroes, the rest of Canada would get:
-- improved privacy protections (over and above PIPEDA);
-- improved social cohesion (like obligations to help your neighbours); and
-- a new anchor that keeps Liberals from moving the Overton Window to woo Maple MAGAts.
/3
-- improved privacy protections (over and above PIPEDA);
-- improved social cohesion (like obligations to help your neighbours); and
-- a new anchor that keeps Liberals from moving the Overton Window to woo Maple MAGAts.
/3
Best of luck to you, I got shadow band twice, then had the first account locked, I'm currently looking into [Reddit Support] to have them clean and delete both of my accounts. As a Canadian, I may just have to invoke, PIPEDA (Personal Information Protection and Electronic Documents Act) Fuck Reddit!
November 3, 2025 at 8:49 AM
Best of luck to you, I got shadow band twice, then had the first account locked, I'm currently looking into [Reddit Support] to have them clean and delete both of my accounts. As a Canadian, I may just have to invoke, PIPEDA (Personal Information Protection and Electronic Documents Act) Fuck Reddit!
CIPPIC granted leave to intervene in Privacy Commissioner of Canada v. Aylo
This case will define what meaningful consent means under PIPEDA when it comes to intimate images.
🔗 Learn more: cippic.ca/news/cippic-...
#PrivacyLaw #PIPEDA #DigitalRights #Consent #CIPPIC
This case will define what meaningful consent means under PIPEDA when it comes to intimate images.
🔗 Learn more: cippic.ca/news/cippic-...
#PrivacyLaw #PIPEDA #DigitalRights #Consent #CIPPIC
CIPPIC Granted Leave to Intervene in OPC v. Aylo | CIPPIC
cippic.ca
October 30, 2025 at 5:29 PM
CIPPIC granted leave to intervene in Privacy Commissioner of Canada v. Aylo
This case will define what meaningful consent means under PIPEDA when it comes to intimate images.
🔗 Learn more: cippic.ca/news/cippic-...
#PrivacyLaw #PIPEDA #DigitalRights #Consent #CIPPIC
This case will define what meaningful consent means under PIPEDA when it comes to intimate images.
🔗 Learn more: cippic.ca/news/cippic-...
#PrivacyLaw #PIPEDA #DigitalRights #Consent #CIPPIC
There were 11 emergency requests this quarter, and we identified subscribers in 10 cases. We rejected 1 that came from a foreign law enforcement agency.
11 exigent requests is a new record for a quarter. (Average is 6). We got 7 in Q4 of 2024. The previous max was 10 in Q1 of 2024.
5/9
11 exigent requests is a new record for a quarter. (Average is 6). We got 7 in Q4 of 2024. The previous max was 10 in Q1 of 2024.
5/9
October 27, 2025 at 4:51 PM
There were 11 emergency requests this quarter, and we identified subscribers in 10 cases. We rejected 1 that came from a foreign law enforcement agency.
11 exigent requests is a new record for a quarter. (Average is 6). We got 7 in Q4 of 2024. The previous max was 10 in Q1 of 2024.
5/9
11 exigent requests is a new record for a quarter. (Average is 6). We got 7 in Q4 of 2024. The previous max was 10 in Q1 of 2024.
5/9