CIPP/C: Certified Information Privacy Professional/Canada

TELUS’s voice-recognition authentication system collected employees’ voice prints, which the Federal Court of Appeal confirmed constituted personal information under PIPEDA.

The Organisation for Economic Co-operation and Development published its Privacy Guidelines in 1980. They establish eight basic principles for privacy and personal-data protection, including collection limitation, data quality, purpose specification, use limitation, security safeguards, openness, individual participation, and accountability.

Video surveillance collects personal information when it captures or records images of identifiable individuals. Storage and viewing occur after the information has already been collected.

Nova Scotia’s Personal Information International Disclosure Protection Act requires government bodies and their service providers to store and access personal information in Canada, unless consent is obtained or an authorized exception, including necessary operational requirements, applies.

A principal driver of comprehensive privacy legislation is harmonization with Europe’s region-wide data-protection framework, which supports compatible legal standards and cross-border information flows. This is consistency with Pan-European laws.