🇨🇦 Canada · Privacy & Data Protection
Data-protection regime (GDPR/CCPA/PIPL and local laws), registration duties, and the official supervisory authority.
In Canada, private-sector privacy is governed federally by PIPEDA (with substantially-similar provincial laws in some provinces), overseen by the Office of the Privacy Commissioner of Canada (OPC). Organisations must obtain meaningful consent, protect personal information, give individuals access, and report breaches that pose a real risk of significant harm.
- Obtain meaningful consent to collect, use or disclose personal information under PIPEDA.
- Safeguard personal information and give individuals access to their data.
- Report breaches posing a real risk of significant harm to the OPC and affected individuals.
Official authorities
- Office of the Privacy Commissioner of Canada (OPC)
Official federal privacy regulator.
Official-information aggregation, not legal advice. Always verify on the authority's own site.
Government portals
- Government of Canada — Canada's federal service portal — immigration, taxes, benefits, and travel info
- Immigration, Refugees and Citizenship Canada — Express Entry, Provincial Nominee Program, work/study permits, and PR card applications
- Canada Revenue Agency (CRA) — T1 personal tax returns, corporate taxes, GST/HST, and benefit applications (CCB)