Collecting personal information
The Personal Information Protection and Electronic Documents Act (PIPEDA) sets out the rules businesses subject to the Act must follow when collecting personal information. Businesses must clearly identify the reasons for collecting personal information before or at the time of collection, and how it will be used. Explaining why personal information is needed is essential to obtaining valid consent from the individuals, which is another requirement of PIPEDA.
PIPEDA also specifies that businesses must limit their collection to what is necessary for the identified purposes. So before collecting any personal information, businesses should carefully consider what they are collecting, why, how and what they will use it for, in order to ensure they have the right privacy practices in place.
Explore the links on this page to learn more about requirements and best practices for collecting personal information in accordance with PIPEDA.
Find information for businesses about how PIPEDA applies to the collection, use and disclosure the SIN.
Learn about PIPEDA and find information to help businesses understand and comply with the law.
Learn how to comply with PIPEDA when recording telephone calls with customers.
Find advice for businesses collecting, using and disclosing the personal information of children and youth.
Find information and guidance for businesses about using overt video surveillance in a way that respects privacy law.
Learn about privacy obligations and responsibilities for private sector organizations engaging in covert video surveillance.
Find information and guidance about consent under PIPEDA.
Access guidance for businesses about how to identify and authenticate of customers in a way that complies with PIPEDA.
Find information for businesses to help develop better privacy policies.
Learn about how electronic and digital payments work and associated privacy issues, and find related tips for protecting personal information.
Access guidance for businesses about reporting financial transactions to combat crime and terrorism, while respecting privacy obligations under PIPEDA.
Report a problem or mistake on this page
- Date modified: