⁦PIPEDA⁩

⁦Canada (federal)⁩ الخصوصية

الحالة

⁦In force. Replacement Bill C-36 (Protecting Privacy and Consumer Data Act) tabled 15 Jun 2026; before Parliament, not yet law.⁩✓المصادر: ⁦parl.ca⁩, ⁦gowlingwlg.com⁩, ⁦smartbiggar.ca⁩

على من ينطبق

⁦Private-sector organizations handling personal info in commercial activity, plus federally regulated firms (banks, airlines, telecoms) incl. employee data. Applies to data crossing provincial or national borders, even in Alberta, BC and Quebec, which have their own similar laws.⁩✓المصادر: ⁦priv.gc.ca⁩, ⁦laws-lois.justice.gc.ca⁩

حدود الحجم

⁦No size, revenue or volume thresholds; applies to any organization collecting, using or disclosing personal info in the course of commercial activity.⁩✓المصادر: ⁦priv.gc.ca⁩, ⁦laws-lois.justice.gc.ca⁩

الجهة الرقابية

⁦Office of the Privacy Commissioner of Canada (OPC)⁩✓المصادر: ⁦priv.gc.ca⁩, ⁦priv.gc.ca⁩

الإبلاغ عن الخروقات أو الحوادث

⁦Report to the OPC and notify affected individuals as soon as feasible for any breach of security safeguards creating a real risk of significant harm (e.g., financial loss, identity theft, humiliation). Keep a record of every breach and provide it to the OPC on request.⁩✓المصادر: ⁦laws-lois.justice.gc.ca⁩, ⁦priv.gc.ca⁩

مهلة الرد على طلبات البيانات الشخصية

⁦Access requests: respond within 30 days of receipt; may extend by up to 30 more days (or longer for format conversion) with written notice to the individual within the first 30 days.⁩

مسؤول حماية البيانات

⁦Must designate one or more individuals accountable for PIPEDA compliance and make their name or title known internally and externally (e.g., on the website).⁩

الممثل المحلي

قيد التحقق

نقل البيانات إلى الخارج

⁦Transfers for processing are allowed without extra consent if used for the original purpose. The organization stays accountable, must use contracts to ensure comparable protection, and must tell individuals their data may be processed abroad and accessed by foreign authorities.⁩✓المصادر: ⁦priv.gc.ca⁩, ⁦torys.com⁩

ملفات تعريف الارتباط والموافقة

⁦Meaningful consent required. Opt-out consent for online behavioural advertising is acceptable only with clear, timely notice, easy and immediate opt-out, non-sensitive data and limited retention; avoid tracking children and uncontrollable trackers (fingerprinting, supercookies).⁩✓المصادر: ⁦priv.gc.ca⁩, ⁦loeb.com⁩

أقصى عقوبة

⁦Fines up to C$100,000 per indictable offence (C$10,000 on summary conviction) for knowingly breaching breach-reporting, notification or record-keeping duties, not keeping information under an access request, retaliating against whistleblowers, or obstructing the Commissioner. Bill C-36 would allow penalties up to C$10M or 3% of gross global revenue, and fines up to C$25M or 5%.⁩✓المصادر: ⁦laws-lois.justice.gc.ca⁩, ⁦priv.gc.ca⁩, ⁦smartbiggar.ca⁩, ⁦gowlingwlg.com⁩

المعلومات الموسومة بعبارة «قيد التحقق» لا تزال قيد التأكيد ولا تُقدَّم كإجابات.

ما يجب عليك فعله

• ⁦Appoint a privacy officer accountable for compliance and publish their name or title.⁩
• ⁦Obtain meaningful consent and limit collection, use and disclosure to identified purposes.⁩
• ⁦Answer access requests within 30 days (one extension of up to 30 days with notice).⁩
• ⁦Report real-risk-of-significant-harm breaches to the OPC and notify affected people as soon as feasible.⁩
• ⁦Keep a record of every security breach and provide it to the OPC on request.⁩
• ⁦Use contracts to ensure comparable protection for data sent to processors, including abroad, and disclose foreign processing.⁩

التغييرات الأخيرة

⁦Bill C-27 (CPPA/AIDA) died on the order paper. Bill C-36, the Protecting Privacy and Consumer Data Act, was tabled 15 Jun 2026; it would replace PIPEDA⁩'⁦s privacy part, move oversight to a new Digital Safety and Data Protection Commission, and add data-mobility and automated-decision explanation and human-review rights. Before Parliament; not yet law.⁩✓

المصادر

• المصدر الأساسي: ⁦https://laws-lois.justice.gc.ca/eng/acts/P-8.6/⁩
• المصدر الثاني: ⁦https://gowlingwlg.com/en/insights-resources/articles/2026/ottawa-tables-long-awaited-federal-privacy-reform-legislation⁩
• الجهة الرقابية: ⁦Office of the Privacy Commissioner of Canada (OPC)⁩

✓ = مؤكَّد من مصدرين مستقلين، أحدهما على الأقل رسمي. كيف نتحقق

معلومات فقط، وليست استشارة قانونية. القوانين تتغير؛ تحقّق مع الجهة الرقابية أو محامٍ مؤهل قبل الاعتماد على هذه الصفحة. هل لاحظت خطأ؟ راسلنا على ⁦contact@⁩⁦glancedeskjurisdiction.com⁩.