AI and privacy checker for Canadian businesses
See which Canadian privacy rules to check before you use AI on personal data.
This is general information, not legal advice.
Laws and guidance covered
- Personal Information Protection and Electronic Documents Act (PIPEDA)
- Personal Information Protection Act (British Columbia)
- Personal Information Protection Act (Alberta)
- Quebec Law 25, amending the Act respecting the protection of personal information in the private sector (P-39.1)
- Personal Health Information Protection Act, 2004 (Ontario) (PHIPA)
- Federal AI legislation: AIDA (Bill C-27) and what followed
- Voluntary Code of Conduct on the Responsible Development and Management of Advanced Generative AI Systems
- Principles for responsible, trustworthy and privacy-protective generative AI technologies
Starter AI policy templateHow the checker works
Common questions
Is this legal advice?
No. It's general information to help you prepare. Have a qualified lawyer confirm what applies to your business before you rely on it.
Which laws does it cover?
It covers federal and provincial privacy laws and federal AI guidance. Each law's page links to the source we used and shows when we checked it.
Can I use the starter AI policy as it is?
Treat it as a first draft. Adapt it to your business and have counsel review it before you adopt it.