The following nformation from The Office of the Privacy Commissioner of Canada to help organizations fulfill their responsibilities under the Personal Information Protection and Electronic Documents Act (PIPEDA).
Organizations covered by the Act must obtain an individual's consent when they collect, use or disclose the individual's personal information.
PIPEDA applies to the collection, use or disclosure of personal information in the course of a commercial activity.
A commercial activity is defined as any particular transaction, act, or conduct, or any regular course of conduct that is of a commercial character, including the selling, bartering or leasing of donor, membership or other fund-raising lists.
Under PIPEDA, personal information includes any factual or subjective information, recorded or not, about an identifiable individual. This includes information in any form, such as:
There are some instances where PIPEDA does not apply. Some examples include: