PIPEDA, or the Personal Information Protection and Electronic Documents Act, is Canada’s federal privacy law for private-sector organizations. Enacted in 2000, it governs how businesses collect, use, and disclose personal information during commercial activities. PIPEDA requires organizations to obtain consent when collecting personal data, inform individuals about its use, and safeguard that information. The law grants individuals the right to access and correct their personal information held by organizations. PIPEDA applies to most businesses across Canada, except in provinces with substantially similar privacy laws. Non-compliance can lead to investigations and enforcement actions by the Office of the Privacy Commissioner of Canada.