Document background
The Data Privacy Notice is a mandatory document for organizations operating in Canada that collect, use, or disclose personal information in the course of commercial activities. It must comply with PIPEDA (or its successor CPPA when enacted) at the federal level and applicable provincial privacy laws. This document should be implemented when an organization begins operations, launches new services, or updates its data handling practices. The notice must include specific information required by Canadian privacy laws, such as the purposes of collection, use and disclosure practices, consent requirements, and individual rights. It should be written in clear, accessible language and must be readily available to individuals before or at the time their personal information is collected.
