Enforcement of PIPEDA

The Office of the Privacy Commissioner of Canada (OPC) oversees compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA), which sets out the privacy obligations many private sector organizations must adhere to when they handle personal information in the course of their commercial activities. For federally regulated organizations, PIPEDA also applies to the personal information of employees as well as applicants for employment.

Complaints under PIPEDA can be initiated by an individual or the Commissioner. When an individual files a complaint under PIPEDA, the OPC first determines whether the matter is covered by the Act. Once a complaint is accepted, the OPC begins an investigation. When appropriate for the privacy issue in question, efforts are made to resolve complaints in the early stages of the investigation process (i.e. early resolution).

The following interactive graphic provides a general overview of how the investigation process works and how PIPEDA is enforced. Click on the “i” icons for more detailed explanations of each box.

Date modified: