Three privacy regimes, one design
A Thunder Bay project can touch PIPEDA as a private-sector organisation, FIPPA or MFIPPA as a public body, and PHIPA where health information is involved. We identify which rules apply to each data set at the start, then constrain what is collected, who can see it and how long it is kept.