Agency or developer? We're building something exciting for you. Learn more →
Home > Canada’s New Consumer Privacy Protection Act (CPPA)

Canada’s New Consumer Privacy Protection Act (CPCPA) is a set of rules that apply to all Canadian businesses that collect, use and disclose personal information about Canadians. The law sets out how organizations must handle people’s personal information and how they must respond to privacy concerns. The CPPA came into force on January 1, 2022.

The CPPA replaces the Personal Information Protection and Electronic Documents Act (PIPEDA) which was enacted in 2001, but has not been updated since then. The new law brings PIPEDA up to date with modern technology such as big data and artificial intelligence algorithms. It also includes changes to reflect new types of business models such as online marketplaces and social media platforms.

The CPPA makes it easier for consumers to control their own personal information by giving them more control over how it is used by companies and organizations that collect, use or disclose it. It also expands the circumstances in which consumers can sue companies for violations of privacy rights under the Act.

Under the CPPA, organizations must:

Start building your privacy experience today

Free forever plan available — no credit card required