Document background
A Privacy Notice is required for organizations operating in Canada that collect, use, or disclose personal information in the course of commercial activities. This document must comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) at the federal level, as well as provincial privacy laws where applicable. The Privacy Notice should be written in clear, accessible language and must address the ten fair information principles under PIPEDA, including accountability, identifying purposes, consent, limiting collection, limiting use, accuracy, safeguards, openness, individual access, and challenging compliance. Organizations must regularly review and update their Privacy Notice to reflect changes in their practices, legal requirements, and technological developments. Special attention must be paid to Quebec's Law 25 requirements if applicable, and organizations should anticipate upcoming changes under the proposed federal privacy law reforms.
