# Automate your PIPEDA Compliance with CookieYes > For the complete site index, see [llms.txt](/llms.txt). Every page is also available as Markdown: replace the trailing slash with `.md` (`/pricing/` becomes `/pricing.md`), or send `Accept: text/markdown` to the page URL itself. > Is your business PIPEDA compliant? As privacy takes a firm grip, ensure that you are privacy-ready to avoid legal risks. **Source:** https://www.cookieyes.com/pipeda-compliance/ --- # Build trust in your business with PIPEDA compliance Automate consent management and align your business with regulatory compliance with our easy-to-use cookie consent solution. [Become PIPEDA Compliant](https://app.cookieyes.com/trial?plan=pro-monthly&ref=lp_PIPEDA_hero) 14-day free trial Cancel anytime ![Build trust in your business with PIPEDA compliance](https://assets.cookieyes.com/pipeda_hero_2fd4f695b0.svg) ## The #1 cookie consent solution, trusted by 1.5 Million+ websites ![Decathlon](https://assets.cookieyes.com/decathlon_a23456d440.svg) ![KFC](https://assets.cookieyes.com/kfc_73dc90db22.svg) ![Dominos](https://assets.cookieyes.com/dominos_9ce9dc7569.svg) ![Heineken](https://assets.cookieyes.com/heineken_f0fca7d239.svg) ![Forbes](https://assets.cookieyes.com/forbes_b76200d4a5.svg) ![Toyota](https://assets.cookieyes.com/toyota_71a8106b6a.svg) ![Renault](https://assets.cookieyes.com/renault_d254f28337.svg) ## Check your PIPEDA Compliance CookieYes will scan your website and keep you informed on the personal data your website collects through cookies. ![Cookie Scanner](https://assets.cookieyes.com/cookie_scanner_img_dbb23c8c7a.svg) ![PIPEDA compliance overview](https://assets.cookieyes.com/pipeda_launch_04e7ee4045.svg) The Personal Information Protection and Electronic Documents Act (PIPEDA) is a federal privacy law that regulates how the private sector collects, uses and discloses the personal information of consumers in Canada. PIPEDA came into full effect on January 1, 2004. ## PIPEDA Compliance Checklist for Websites - Limit data collection only for legitimate purposes - Obtain user consent for cookies and trackers - Allow users to easily withdraw consent - Maintain a record of all user consents - Include a clear and up-to-date privacy policy - Notify data breaches to OPC and users ## Comply with PIPEDA using CookieYes ### Display cookie consent banner for visitors The PIPEDA requires businesses to obtain consent prior to the collection, use, or disclosure of personal information (including data collected through cookies). With CookieYes you can - Scan your website for cookies against a 100,000+ cookie database - Display a custom cookie banner to get opt-in consent - Show a consent revisit widget for users to withdraw consent ![Display cookie consent banner for visitors](https://assets.cookieyes.com/cookie_banner_baeba64edd.svg) ### Automate consent management Ensure up-to-date and ongoing compliance with PIPEDA’s requirements for consent by automating your consent management. With CookieYes you can - Auto-block all third-party cookies before user consent - Schedule cookie scanning for continuous compliance - Document consent logs for regulatory audits ![Automate consent management](https://assets.cookieyes.com/consent_management_730052a633.svg) ### Generate a compliant privacy policy Under the PIPEDA, businesses should respect the principle of openness and inform how they collect, use, or disclose users’ personal information. With CookieYes you can - Use our pre-built, legally-compliant policy templates - Generate your privacy policy and cookie policy in minutes - Simply copy-paste the legal policies to your website ![Generate a compliant privacy policy](https://assets.cookieyes.com/policy_generators_dc10b32d81.svg) ## Achieve regulatory compliance with ease with our no-code cookie consent solution [Become PIPEDA Compliant](https://app.cookieyes.com/trial?plan=pro-monthly&ref=lp_PIPEDA_center) 14-day free trial Cancel anytime ## Learn more and take the first step towards PIPEDA compliance ![What is PIPEDA?](https://assets.cookieyes.com/pipeda_icon_1_bbb63ba051.svg) ### What is PIPEDA? The Personal Information Protection and Electronic Documents Act (PIPEDA) is a federal Canadian data privacy law that regulates how businesses collect, use and disclose personal data in the course of any commercial activity within Canada. This law was passed in 2000 before privacy laws such as the GDPR and CCPA came into the picture. PIPEDA came into force on January 1, 2001, and was implemented in three stages with the final stage of the law coming into effect on January 1, 2004. ![Who does PIPEDA apply to?](https://assets.cookieyes.com/apply_to_icon_c0205ce9f2.svg) ### Who does PIPEDA apply to? PIPEDA applies to private-sector organizations across Canada that handle personal information when engaging in any “commercial activity” such as selling, bartering or leasing of donors, membership or other fundraising lists. PIPEDA applies to any businesses that operate in Canada and handle personal information that crosses provincial or national borders. Federal government organizations listed under the Privacy Act, provincial or territorial governments, non-profit organizations that do not engage in commercial activities, and political and charitable organizations are exempt from PIPEDA. ![What are consumer rights?](https://assets.cookieyes.com/consumer_rights_icon_f33a6ebd2b.svg) ### What are consumer rights? ![Right to access](https://assets.cookieyes.com/icon_access_2e8b82213f.svg) #### Right to access The right to access personal data and to have it available in a clear and readable format, free of cost. ![Right to correct](https://assets.cookieyes.com/icon_correction_d30a9d9c52.svg) #### Right to correct The right to request correction if personal information is inaccurate or incomplete. ![Right to withdraw consent](https://assets.cookieyes.com/icon_revoke_ccef04522f.svg) #### Right to withdraw consent The right to revoke or withdraw consent to the processing of personal data, subject to legal or contractual restrictions and reasonable notice. ![Right to complain](https://assets.cookieyes.com/icon_complain_b6a5620bca.svg) #### Right to complain The right to challenge an organization’s compliance with an individual accountable for the organization’s compliance. ![What is the penalty for non-compliance?](https://assets.cookieyes.com/penalty_icon_b3a2c9445d.svg) ### What is the penalty for non-compliance? Organizations that violate PIPEDA’s requirements such as security safeguards, and data breach reporting may be subject to fines of up to CAD 100,000. ## FAQ on PIPEDA Compliance **Does Canada have a data privacy law?** Canada has two federal data privacy laws, both enforced by the Office of the Privacy Commissioner of Canada. - **PIPEDA:** The Personal Information Protection and Electronic Documents Act (PIPEDA) is a federal law that governs how organizations in the private sector collect, use, and disclose personal information for their commercial activities. - **Privacy Act:** This federal Act governs the Government's collection, use and disclosure of personal information in the course of providing services. **What is personal information in PIPEDA?** PIPEDA defines personal information as any information about an identifiable individual. This can include data such as name, age, gender, race, marital status, home address, ID numbers, driver's license number, social insurance number etc. PIPEDA requires heightened levels of protection for sensitive personal information. While the law does not define what constitutes sensitive personal information, it clarifies that any information can be sensitive depending on context. PIPEDA cites medical history and income records as examples. **What are the exceptions to the applicability of PIPEDA?** There are some exceptions to the applicability of PIPEDA. It does not apply to - Government organisations covered by the Privacy Act - An individual's collection, use, or disclosure of personal information strictly for personal or domestic purposes. - An organization's collection, use, or disclosure of personal information solely for journalistic, artistic or literary purposes. PIPEDA does not apply to organizations that operate only within the provinces of Alberta, British Columbia and Quebec, as they are required to follow provincial privacy laws similar to PIPEDA. **Who is the regulatory authority for PIPEDA Canada?** The Office of the Privacy Commissioner of Canada (OPC) is the supervisory authority for the implementation of PIPEDA. It is the only federal agency responsible for overseeing compliance with PIPEDA, while each province and territory designates its supervisory authority under the applicable privacy law. The OPC has investigatory powers to probe complaints related to the handling of personal information, and promoting the privacy rights of individuals. The OPC also holds the power to conduct audits of organizations and resolve complaints through dispute-resolution mechanisms. However, the OPC has limited corrective powers. **Does PIPEDA allow data transfer outside Canada?** Yes, PIPEDA allows for the transfer of personal information outside of Canada. However, PIPEDA does not contain any specific provisions related to cross-border data transfer. But all transfers of personal information to any third-party processor, whether within Canada or internationally, are subject to the accountability principle under PIPEDA. As per this principle, organizations are responsible for personal information that has been transferred to a third party and are required to use contractual or other means to ensure that the third party provides a comparable level of protection. **Does GDPR apply to Canada** Canada is not subject to the General Data Protection Regulation (GDPR) because GDPR oversees the data privacy and protection of EU and EEA residents. However, GDPR has extra-territorial scope, meaning it applies to the processing of personal data of individuals in the EU, regardless of where the processing takes place. Therefore, it can be applied to businesses in Canada that offer goods or services to individuals in the EU, or monitor the behaviour of individuals in the EU. **Where can I find additional resources on PIPEDA?** Here are some links you can refer to for additional reading: - [PIPEDA Official Text](https://laws-lois.justice.gc.ca/eng/acts/p-8.6/) - [Simplified Guide on Canada's PIPEDA](https://www.cookieyes.com/blog/pipeda-canada/) ## Fast-track your PIPEDA compliance in minutes Set up a cookie consent banner in 3 simple steps and automate your compliance. [Become PIPEDA Compliant](https://app.cookieyes.com/trial?plan=pro-monthly&ref=lp_PIPEDA_bottom) 14-day free trial Cancel anytime **Form** - Enter your website URL (`url`, text, required) Submit: "Scan website"