Identification and authentication

An organization needs enough information about an individual to authorize a legitimate transaction, but needs to ensure that it does not collect, use, retain or disclose personal information that is not necessary for that purpose.Trust is an essential component of Canada’s economy and the global digital economy.

Explore the links below to find best practices for businesses on the identification and authentication of individuals under the Personal Information Protection and Electronic Documents Act (PIPEDA)as well information about the privacy implications of using biometrics for these purposes.

Guidelines for Identification and Authentication

Find guidelines for businesses on how to identify and authenticate individuals in a manner that complies with PIPEDA.

Best Practices for the use of Social Insurance Numbers in the private sector

Find information for businesses about how PIPEDA applies to the collection, use and disclosure the SIN.

Collection of Driver’s Licence Numbers Under Private Sector Privacy Legislation

Learn about PIPEDA and find information to help businesses understand and comply with the law.

Tips for mitigating password reuse risk

Read tips for businesses on mitigating risks of password reuse by customers and employees.

Guidance on Managing Family Member/Household Accounts

Find guidance for businesses on how to avoid mishandling personal information when dealing with household accounts.

Photo Identification Guidance

Find guidance for businesses on the practice of asking for photo identification to verify credit card purchases.

Data at Your Fingertips Biometrics and the Challenges to Privacy

Read information for the government and private sector about the privacy implications of biometrics and how to strengthen privacy safeguards for biometric systems.

Date modified: