Managing PIPEDA obligations with Riskophia
Personal Information Protection and Electronic Documents Act
What it is
Canada's federal private-sector privacy law. It governs how organizations collect, use and disclose personal information in the course of commercial activity, and it sets out ten fair information principles, breach reporting duties and the role of the Office of the Privacy Commissioner.
Who it applies to
Private-sector organizations in Canada that handle personal information in commercial activity, including those in provinces without substantially similar legislation, and federally regulated businesses.
Representative obligations
- Accountability and a designated privacy lead
- Identifying purposes and obtaining consent
- Limiting collection, use, disclosure and retention
- Safeguards appropriate to sensitivity
- Openness about policies and practices
- Individual access and challenging compliance
- Breach of security safeguards: records, reporting and notification
This list is illustrative and is not legal advice. Your obligations depend on your activities, jurisdictions and the current text of the law.
From PIPEDA text to evidence on file.
Riskophia helps you manage the compliance activities associated with PIPEDA. It does not by itself make you compliant or approved; that depends on your practices and on the relevant regulator.
Requirements register
PIPEDA obligations broken into plain-language requirements with owners, cadence and status.
Policies and attestations
Policy templates aligned to PIPEDA, version controlled and acknowledged by the right roles.
Training records
Mandatory training assigned by role through Learnophia, with completion recorded as evidence.
Evidence and gaps
Evidence linked to each requirement; gaps become owned actions with verified closure.
Crosswalk
Where PIPEDA overlaps other regulations and standards, one control and one piece of evidence serve all of them.
Export
An inspection-ready package of status, evidence and history for PIPEDA.
See your PIPEDA obligations in Riskophia.
Book a 30-minute demo led by a compliance professional, or talk to an expert about your sector.