In Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) establishes laws that regulate the collection, use, and disclosure of personal information by private sector organizations.

The laws state that personal information must be protected by security safeguards appropriate to the sensitivity of the information, including technological measures, such as the use of passwords and encryption.