Provincial and Territorial Privacy Laws
Every province and territory has its own privacy framework. Some have strong private-sector laws (Quebec, BC, Alberta). Others rely on PIPEDA for businesses and use their own laws for public bodies and health records. Select your jurisdiction below to see what applies to you.
- Ontario
Privacy Rights in Ontario
How FIPPA, MFIPPA, PHIPA, and federal law combine to protect Ontarians from provincial ministries to hospitals and school boards.
Read topic - Quebec
Privacy Rights in Quebec (Law 25)
Quebec has Canada's strongest private-sector privacy law after the 2021 reforms in Law 25, with mandatory breach reporting, a right to data portability, and new rules on automated decisions.
Read topic - British Columbia
Privacy Rights in British Columbia
BC's PIPA applies to most private-sector organizations in the province, while FIPPA covers public bodies. The Office of the Information and Privacy Commissioner for BC oversees both, as well as the E-Health (Personal Health Information Access and Protection of Privacy) Act.
Read topic - Alberta
Privacy Rights in Alberta
Alberta has its own private-sector privacy law (PIPA), public-sector access and privacy laws (the Access to Information Act and the Protection of Privacy Act, which replaced FOIP in June 2025), and a dedicated health privacy law (HIA). The OIPC Alberta oversees all of them.
Read topic - Saskatchewan
Privacy Rights in Saskatchewan
Saskatchewan does not have a private-sector privacy law. PIPEDA applies to businesses. FOIP and LA FOIP cover public bodies, and HIPA covers health information.
Read topic - Manitoba
Privacy Rights in Manitoba
Manitoba's FIPPA covers public bodies, PHIA covers health information, and PIPEDA fills the private-sector gap. Complaints go to the Manitoba Ombudsman.
Read topic - New Brunswick
Privacy Rights in New Brunswick
New Brunswick's RTIPPA covers public bodies and PHIPAA covers health information. Since 2019 both are overseen by the Ombud New Brunswick.
Read topic - Nova Scotia
Privacy Rights in Nova Scotia
Nova Scotia's FOIPOP covers public bodies, PHIA covers health information, and Municipal Government Act access provisions apply to municipalities.
Read topic - Prince Edward Island
Privacy Rights in Prince Edward Island
PEI's FOIPP covers provincial public bodies and designated municipalities, and the Health Information Act covers health custodians. The Information and Privacy Commissioner oversees both.
Read topic - Newfoundland and Labrador
Privacy Rights in Newfoundland and Labrador
ATIPPA, 2015 covers provincial public bodies. PHIA covers health custodians. The OIPC makes recommendations under both, with a court-filing enforcement route under ATIPPA, 2015.
Read topic - Yukon
Privacy Rights in Yukon
Yukon's ATIPP Act covers territorial public bodies and health information custodians, with the Ombudsman acting as the Information and Privacy Commissioner.
Read topic - Northwest Territories
Privacy Rights in the Northwest Territories
NWT's ATIPP covers territorial public bodies, while HIA applies to health custodians. The NWT Information and Privacy Commissioner, based in Yellowknife, oversees both.
Read topic - Nunavut
Privacy Rights in Nunavut
Nunavut's ATIPP covers the Government of Nunavut and its public bodies, including the Department of Health. Nunavut has its own Information and Privacy Commissioner, based in Iqaluit.
Read topic
Not sure which commissioner to contact?
If you are unsure which law applies to your complaint, start with our commissioner picker tool or review our federal laws overview to see how PIPEDA, the Privacy Act, and CASL interact with provincial regimes.