Provincial privacy laws
Canadian provincial laws that govern private-sector privacy in place of, or alongside, PIPEDA.
Overview
Quebec, Alberta and British Columbia have private-sector privacy laws recognised as substantially similar to PIPEDA. Quebec’s law, significantly modernised in recent years, is overseen by the Commission d’accès à l’information.
As primary legislation it is binding law; regulators fill in and interpret its detail through rules, guidance and supervisory practice. The authorities most closely connected to it are CAI and Provincial privacy commissioners. It is often read together with PIPEDA.
Check the official sources below for legal scope, applicable dates and exceptions. This entry is an explanatory reference, not legal advice.
Why it matters
Operating across provinces can mean several privacy regimes at once.
Who it affects
Organisations operating in Quebec, Alberta and British Columbia.
Where it sits
Ten linked steps connect where you operate to the proof that you complied.
- 01Jurisdiction
- 02Industry
- 03Activity
- 04Authority
- 05Regulation
- 06Requirement
- 07Guidance
- 08Control
- 09Evidence
- 10Enforcement
Connections
The terms most closely tied to Provincial privacy laws. Select one to open it.
What to do about it
- 1Confirm whether you are in scope: who it covers, which activities and where.
- 2Break it into testable requirements.
- 3Map each requirement to a control and an owner.
- 4Track amendments, implementing rules and guidance.
- 5Keep sealed evidence for every control run.
From requirement to evidence.
Provincial laws are mapped alongside PIPEDA with differences flagged.
Request early access →