PIPEDA and provincial privacy
PIPEDA uses fair-information principles including accountability, identified purposes, consent, collection limitation, safeguards, openness, access and correction. Provincial laws may apply instead or alongside it.
Implementation: Document the applicable jurisdiction, purposes, data fields, consent or other authority, providers, retention, safeguards, request handling and breach route.
OPC PIPEDA guidance