The Personal Information Protection and Electronic Documents Act (PIPEDA) is federal privacy legislation governing how private sector organizations collect, use, and disclose personal information. PIPEDA sets rules for consent, data security, individual access rights, and accountability. Some provinces have substantially similar legislation governing private sector privacy in their jurisdictions. While PIPEDA primarily applies to commercial activities, understanding its principles helps municipalities when partnering with private companies or procuring services involving personal data. Municipal privacy obligations typically come from provincial public sector privacy legislation rather than PIPEDA directly. The Act demonstrates Canadian privacy standards applicable across sectors.