Identification and authentication
An organization needs enough information about an individual to authorize a legitimate transaction, but needs to ensure that it does not collect, use, retain or disclose personal information that is not necessary for that purpose.Trust is an essential component of Canada’s economy and the global digital economy.
Explore the links below to find best practices for businesses on the identification and authentication of individuals under the Personal Information Protection and Electronic Documents Act (PIPEDA)as well information about the privacy implications of using biometrics for these purposes.
Find guidelines for businesses on how to identify and authenticate individuals in a manner that complies with PIPEDA.
Find information for businesses about how PIPEDA applies to the collection, use and disclosure the SIN.
Learn about PIPEDA and find information to help businesses understand and comply with the law.
Read tips for businesses on mitigating risks of password reuse by customers and employees.
Guidance for organizations to avoid the mishandling of personal account information when multiple household or family members are involved.
Find guidance for businesses on the practice of asking for photo identification to verify credit card purchases.
Read information for the government and private sector about the privacy implications of biometrics and how to strengthen privacy safeguards for biometric systems.
Report a problem or mistake on this page
- Date modified: