Canada’s private sector has long operated under the Personal Information Protection and Electronic Documents Act (PIPEDA), which enforces ten fair information principles to govern the collection, use, and disclosure of personal information.