Privacy — Canada

A federal data protection statute, provincial regimes, and a tort of intrusion upon seclusion created by the courts in 2012.

Location map — Canada — Privacy
Canada. Simplified location map — Natural Earth data, public domain.

The legal framework

PIPEDA governs personal information in commercial activity federally, while Quebec, Alberta and British Columbia have their own substantially similar laws. In 2012 the Ontario Court of Appeal recognised the tort of intrusion upon seclusion in Jones v Tsige, and other provinces have statutory privacy torts actionable without proof of damage.

Key points

Federal statutePIPEDA, supervised by the Privacy Commissioner of Canada
Provincial statutesQuebec, Alberta and British Columbia have their own regimes
QuebecLaw 25 has added notification, portability and de-indexing rights
TortIntrusion upon seclusion, recognised in Ontario in 2012
Statutory tortsBritish Columbia, Manitoba, Saskatchewan and Newfoundland: actionable without proof of damage
CharterSection 8 protects against unreasonable search by the state
Public disclosure tortRecognised in Ontario in addition to intrusion upon seclusion
Internet harassment tortRecognised by an Ontario court for sustained online campaigns
Criminal CodeVoyeurism and interception offences supplement the civil remedies

In practice

Where to go

Worth knowing

The federal Commissioner can make findings and recommendations but has limited power to fine; for a financial remedy you usually have to go to court. The Ontario courts have been the engine of Canadian privacy law. Decisions there are persuasive but not binding in other provinces.

Official sources and links

← All countries The general article on this topic →

Page checked in September 2026. The instruments cited can change: if in doubt, confirm with the official source given.

Locate this page in the site map

A question, a correction, a suggestion? Write to us.