The Privacy Officer’s Guide to the Personal Information Protection and Electronic Documents Act, 2026 Edition

Revised and updated with recent cases and regulatory guidance, The Privacy Officer’s Guide to the Personal Information Protection and Electronic Documents Act, 2026 Edition by Timothy M. Banks is an essential reference on compliance with Canada's privacy law regime. Canada’s existing Personal Information Protection and Electronic Documents Act (PIPEDA) is being pushed to its limits by an activist Office of the Privacy Commissioner of Canada (OPC). The result is that the law is often applied in ways that may not be obvious.

This Guide sorts through past OPC guidance to help sort out which prior interpretations are reliable and where the OPC may go next. In addition, this Guide contains extensive commentary on the previously proposed Consumer Privacy Protection Act (CPPA) which would have replaced PIPEDA had become law. The Guide compares the CPPA to PIPEDA and explains how future law reform may change current guidance and practices.

Features

• Clear explanation of the law and case summaries relating to:
  • Collection responsibilities for particular types of personal information
  • Meaningful consent requirements and detailed examples of Commissioner findings on the adequacy of consent
  • Appropriate uses of personal information
  • Application to employees of federal works, undertakings and businesses
  • When disclosure and sharing is permitted
  • Security incidents and data breach reporting requirements
  • Outsourcing and cross border transfers
  • Enforcement framework
• Extensive comparison of PIPEDA to the CPPA with new finding aids to assist in locating relevant discussion of key sections of PIPEDA and the CPPA
• Full text of the Act and the Regulations organized thematically to permit the reader to locate commentary, cases, and guidance regarding a concept in one place

Highlights of the 2026 Edition

• Updates on key case law developments
• Comparative Analysis of PIPEDA and the privacy laws of Albera, British Columbia, and Quebec
• A thorough discussion of Bill C-27 (Digital Charter Implementation Act, 2022), which proposed repealing parts of PIPEDA and introducing the Consumer Privacy Protection Act (CPPA)
• Commentary on similarities and differences between PIPEDA and the CPPA across relevant sections
• A revised Table of Concordance linking provisions in PIPEDA, the CPPA, and provincial laws
• The full text of the Act and its Regulations

Who Will Benefit

• Organizations that deal with personal information, including financial institutions, professional firms, private health care providers, private educational institutions, private investigators, consumer reporting agencies and all manner of businesses that have occasion to handle personal information
• Service providers to such organizations, including privacy, security and information management consultants and data processors
• Compliance and privacy officers and information managers
• Legal practitioners, including privacy lawyers, corporate and commercial lawyers, IP lawyers, health lawyers, litigators, and corporate counsel
• Individuals who want to:
  • Ensure the protection and appropriate use of their personal information that is collected or generated in connection with the purchase of goods or services, employment or any other activity
  • Gain access to, and ensure the accuracy of, such information