Personal Information Protection and Electronic Documents Act - Implementation

Implementation

The implementation of PIPEDA occurred in three stages. Starting in 2001, the law applied to federally regulated industries (such as airlines, banking and broadcasting). In 2002 the law was expanded to include the health sector. Finally in 2004, any organization that collects personal information in the course of commercial activity was covered by PIPEDA, except in provinces that have "substantially similar" privacy laws. Five provincial privacy laws have been declared by the federal Governor in Council to be substantially similar to PIPEDA:

• An Act Respecting the Protection of Personal Information in the Private Sector (Quebec).
• The Personal Information Protection Act (British Columbia).
• The Personal Information Protection Act (Alberta).
• The Personal Health Information Protection Act (Ontario).
• The Personal Health Information Privacy and Access Act (New Brunswick).
• The Personal Health Information Act (Newfoundland and Labrador).