Collecting personal information
The Personal Information Protection and Electronic Documents Act (PIPEDA) sets out the rules businesses subject to the Act must follow when collecting personal information. Businesses must clearly identify the reasons for collecting personal information before or at the time of collection, and how it will be used. Explaining why personal information is needed is essential to obtaining valid consent from the individuals, which is another requirement of PIPEDA.
PIPEDA also specifies that businesses must limit their collection to what is necessary for the identified purposes. So before collecting any personal information, businesses should carefully consider what they are collecting, why, how and what they will use it for, in order to ensure they have the right privacy practices in place.
Explore the links on this page to learn more about requirements and best practices for collecting personal information in accordance with PIPEDA.
Find information and guidance about consent under PIPEDA.
Collection, use, disclosure
Limiting collection, fraud prevention, guidance
Find advice for businesses collecting, using and disclosing the personal information of children and youth.
Guidelines, best practices
Find information for businesses to help develop better privacy policies.
Learn about privacy obligations and responsibilities for private sector organizations selling cannabis.
Find information on how political parties can respect privacy.
Report a problem or mistake on this page
- Date modified: