Data handling under PIPEDA
Commercial activity generally answers to PIPEDA, municipal and provincial bodies to FIPPA and MFIPPA, and health information to PHIPA. We keep collection to what a feature actually needs, write down where records travel, and give administrators controls they understand.