The Personal Information and Electronic Documents Act (PIPEDA) governs how organizations can collect, use and disclose the personal information of clients and employees. Personal information includes any information about an identifiable individual other than that individual’s name, and the title, business address, and business phone number of an employee of an organization. This includes information about an individual’s age, address, ID number (such as S.I.N.), income, race, ethnic origin, medical history, employment history, opinions, political affiliations, bank account, credit cards, and purchasing habits.
The principles of the privacy legislation are as follows: