Choose the frameworks that apply to you

PIPEDA is always on. Add provincial or sector frameworks and your control library, readiness scores and evidence binder update automatically — you never answer the same question twice.

Your scope

PIPEDA · PHIPA

2 active frameworks · 9 unique controls in scope

View dashboard

Core framework

PIPEDA

Federal

Personal Information Protection and Electronic Documents Act

The federal private-sector privacy law. Ten fair information principles turned into concrete tasks, policies and consent records.

Applies to: Every organization on ComplyIQ. Mandatory baseline.
Regulator: Office of the Privacy Commissioner of Canada

8 controls mapped Always on

Selectable add-ons

PIPA (British Columbia)

British Columbia

Personal Information Protection Act (British Columbia)

BC's substantially similar provincial regime, covering consent, employee personal information and access requests.

Applies to: Organizations operating primarily within British Columbia.
Regulator: Office of the Information and Privacy Commissioner for BC

6 controls mapped

PIPA (Alberta)

Alberta

Personal Information Protection Act (Alberta)

Alberta's provincial regime, including its distinct mandatory breach reporting test and service-provider obligations.

Applies to: Organizations operating primarily within Alberta.
Regulator: Office of the Information and Privacy Commissioner of Alberta

7 controls mapped

PHIPA (Ontario)

Ontario

Personal Health Information Protection Act (Ontario)

Health custodian duties: safeguards, agent agreements, logging of access to records and breach notification thresholds.

Applies to: Clinics and organizations handling personal health information in Ontario.
Regulator: Information and Privacy Commissioner of Ontario

9 controls mapped