PIPEDA, FIPPA and PHIPA in view
Private-sector work generally sits under PIPEDA, public bodies under FIPPA and MFIPPA, and health information under PHIPA. Which of those binds you is a question for your own counsel. We design forms, logs and integrations so it stays clear what each system stores, who can reach it and how long anything is kept.