{"id":25416,"date":"2020-11-16T16:49:41","date_gmt":"2020-11-16T11:19:41","guid":{"rendered":"https:\/\/www.syscreations.ca\/?p=25416"},"modified":"2020-12-18T13:43:53","modified_gmt":"2020-12-18T13:43:53","slug":"pipeda-myths","status":"publish","type":"post","link":"https:\/\/www.syscreations.ca\/blog\/pipeda-myths\/","title":{"rendered":"PIPEDA Canada Is Not What You Think. Understand It the Easiest Way by Busting Top PIPEDA Myths"},"content":{"rendered":"\n

The best thing about the law is it governs the industry or the entire nation.<\/span><\/p>\n

And the worst with the law is that only a few can understand its obligations and responsibilities.<\/span><\/p>\n

Things get more complicated when there are multiple laws – some at the federal level and some at the state-level – governing the same industry.<\/span><\/p>\n

Canada is going through a similar challenge.<\/span><\/p>\n

It has a privacy law at the federal level known as PIPEDA. PIPEDA stands for the Personal Information Protection and Electronic Documents Act).<\/span><\/p>\n

There are many other laws at the provincial level.<\/span><\/p>\n

Additionally, the official PIPEDA guide published by the government has many complex terminologies that not all people can understand easily.<\/span><\/p>\n

As a result, they find a totally different meaning of the obligations and responsibilities.<\/span><\/p>\n

And this is how the PIPEDA myths are born.<\/span><\/p>\n

Today, we will reveal the top myths and bust them all.<\/span><\/p>\n

Top 10 PIPEDA Canada Myths Busted <\/b><\/b><\/span><\/h1>\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Myth<\/center><\/b><\/b><\/span><\/span><\/span><\/td>\n
Reality<\/center><\/b><\/td>\n<\/tr>\n
PIPEDA is a separate law and there is no similarity between PIPEDA and other provincial laws?<\/span><\/td>\nPIPEDA and every other provincial privacy law share the same purpose – to govern the collection, usage and disclosure of data in the private sector. In fact, regulators have considered PIPEDA as a foundation while drafting provincial laws. This means if you become a complaint with PIPEDA, you become compliant with many other privacy laws to some extent.<\/span><\/td>\n<\/tr>\n
PIPEDA does apply to all organizations in Canada.<\/span><\/td>\nPIPEDA applies to organizations that collect, use and share the personal data of users only during commercial activity.<\/span><\/td>\n<\/tr>\n
There is no difference between PIPEDA and PHIPA.<\/span><\/td>\nThere is a huge difference between PIPEDA and PHIPA. Unlike PIPEDA, PHIPA does apply to only healthcare organizations that collect, use, and disclose personal health information whether or not during commercial activities.<\/span><\/td>\n<\/tr>\n
PIPEDA does apply in all Canadian provinces.<\/span><\/td>\nPIPEDA is the private sector privacy law. In provinces that have their own private sector privacy laws such as Ontario, Alberta and British Columbia, PIPEDA does not apply.<\/span><\/td>\n<\/tr>\n
Personal information does not include information of physical description.<\/span><\/td>\nPIPEDA considers physical descriptions such as height, skin tone, weight as personal data.<\/span><\/td>\n<\/tr>\n
PIPEDA applies to all organizations in the same way.<\/span><\/td>\nPIPEDA does not apply to all in the same way. It largely depends on your commercial activities and business type. For instance, \u201cIf your organization operates in a province with substantially similar provincial legislation (B.C., Alberta and Quebec) and has to follow that law, PIPEDA only applies to interprovincial and international transactions.\u201d and \u201cIf your organization operates in a province not subject to substantially similar provincial legislation and your organization is not an FWUB, PIPEDA applies to all commercial activities; however, it does not apply to employee information in your organization.\u201d<\/span><\/td>\n<\/tr>\n
PIPEDA only governs business activities in Canada.<\/span><\/td>\nAll commercial trans-border personal information flows are covered by PIPEDA. Examples of some trans-border personal information flows are, selling mailing lists to one state from another, sending customer data to another country for a loyalty program.<\/span><\/td>\n<\/tr>\n
If PIPEDA applies to my organization, no other privacy laws apply to my organization.<\/span><\/td>\nThere are possibilities that more than one privacy law can apply to your organization. It could happen if you are on contract with another organization that had to follow a different privacy law.<\/span><\/td>\n<\/tr>\n
I don\u2019t have to take any action in case of a data breach.<\/span><\/td>\nThe data breach is serious trouble. You need to take a series of actions if such a misshape occurs. These actions include, you need to report the breach to the privacy commissioner of Canada, you need to notify all individuals, organizations and government institutions whose data has been neutralized, and lastly, you need to keep the record of the breach.<\/span><\/td>\n<\/tr>\n
I need to ask consent before every time I use or share the users\u2019 data.<\/span><\/td>\nYou don\u2019t need to always ask consent. There are a few exceptions. For instance, if the disclosure is required to warrant, a court order. If the collection and use with consent would compromise the accuracy of the information.<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Having PIPEDA myths and running a business at the same time is a deadly combination. Hire a PIPEDA consultant now.<\/b><\/span><\/h2>\n

PIPEDA is scary because of its complexity, difficult terminologies, number of regulations, and most importantly the violation fee.<\/span><\/p>\n

No manner, how hard you try to be compliant with PIPEDA, you end up not meeting a requirement of the PIPEDA.<\/span><\/p>\n

And this guarantees you a visit to the Privacy Commissioner of Canada.<\/span><\/p>\n

A PIPEDA consultant plays a crucial role. In case you\u2019re wondering about his roles, here are a few of them,<\/span><\/p>\n