PIPEDA, FIPPA/MFIPPA and PHIPA
Toronto organisations can fall under three regimes: PIPEDA for businesses, FIPPA or MFIPPA for provincial and municipal public bodies, and PHIPA wherever personal health information is involved. We confirm which apply before designing data flows, consent and access requests.