Discover PIPEDA Personal Information Protection and Electronic Documents Act
PIPEDA is a Canadian law that governs how private sector organizations handle personal information, requiring consent, limited collection, accuracy, safeguards, access, and accountability.
Understanding PIPEDA
PIPEDA, the Personal Information Protection and Electronic Documents Act, is a Canadian privacy law that sets out rules for how private sector organizations must handle personal information in the course of commercial activities. It requires organizations to obtain individuals' consent for the collection, use, and disclosure of their personal information, except where inappropriate. Personal information must be collected for purposes that a reasonable person would consider appropriate, and organizations must make reasonable efforts to ensure its accuracy, completeness, and security. Individuals have the right to access their personal information held by an organization and to challenge its accuracy. Organizations are accountable for complying with PIPEDA's principles and must designate individuals responsible for privacy compliance.
Exterro's Solutions
Deleting data reduces the damage done by data breaches, even if it doesn't directly reduce their likelihood of taking place. After all, you can't lose what you don't have, and bad actors can't take advantage of PII or other sensitive data if it's responsibly deleted. It also helps reduce legal risk, as data that is defensibly deleted does not need to be produced by the organization in any subsequent discovery.
Resources for Law Firms
Utilize our free resources below to see how Exterro can help you become compliant in many of the global regulations.
Data Privacy Alerts
Canada’s Bill C-27 May Make Important Changes to PIPEDA
Learn all about the proposed changes to PIPEDA that the Canadian Parliament is considering as of June 2022.
White Papers
California Privacy Rights Act (CPRA): Compliance Checklist
Use the following checklist to determine whether your business is affected by the CPRA, and to build action items that move the organization toward compliance.
On-Demand Webcast
Move Over CCPA: The Data Retention Requirements You Must Comply with Under The CPRA
"This is the tool that you need to use…When I took over the function of legal hold person, it was daunting to think of all the processes and things I would have to learn. It was hard for me to wrap my head around at the time. Having Exterro made it so much easier."
