OPC guidance
Guidance from Canada’s Office of the Privacy Commissioner on applying PIPEDA and federal privacy law.
Overview
OPC guidance covers consent, breach reporting, accountability, AI and emerging technologies, and is reflected in the OPC’s investigations and findings.
As guidance it may not be binding on its own, but examiners and enforcement staff routinely apply it. The authorities most closely connected to it are OPC. It is often read together with PIPEDA.
Check the official sources below for legal scope, applicable dates and exceptions. This entry is an explanatory reference, not legal advice.
Why it matters
Guidance shows how the authority will judge compliance, so it shapes examinations even when it is not formally binding.
Who it affects
Organisations supervised by the Office of the Privacy Commissioner.
Where it sits
Ten linked steps connect where you operate to the proof that you complied.
- 01Jurisdiction
- 02Industry
- 03Activity
- 04Authority
- 05Regulation
- 06Requirement
- 07Guidance
- 08Control
- 09Evidence
- 10Enforcement
Connections
The terms most closely tied to OPC guidance. Select one to open it.
What to do about it
- 1Identify which obligations it interprets.
- 2Compare it with how your controls work today and draft changes.
- 3Record the decision and the reasoning behind it.
- 4Watch for updates, replacement or withdrawal.
From requirement to evidence.
Regulation Layer tracks it as layer three and drafts an impact note for every control a new item touches.
Request early access →