Principles

The Personal Information Protection Act (PIPA) will govern the collection, use and disclosure of personal information by private sector organizations in a manner that recognizes both the right of an individual to have his or her personal information protected, and the need of organizations to collect, use, or disclose personal information for purposes that are reasonable.

Personal information in the custody or control of private sector organizations as it relates to commercial transactions or activities will be subject to the Act. Personal employee information will also be covered by PIPA.

PIPA will allow individuals to request access to their own personal information, including their personal employee information, and to request that personal information be corrected if the accuracy of the information is disputed.

Just as the Information and Privacy Commissioner may review decisions by organizations and agencies subject to the Freedom of Information and Protection of Privacy Act or the Health Information Act, PIPA also allows the Commissioner to review the decisions of private sector organizations to deny an individual access to their own personal information, or to refuse a request for correction to their own personal information. Individuals may also make a complaint to the Commissioner if they believe their personal information has been collected, used or disclosed without proper authority or without their consent.