Businesses that collect, use and disclose personal information in connection with commercial activities in Canada must comply with privacy legislation.  Personal information is defined very broadly as information about an identifiable individual (“Personal Information”).

Examples of Personal Information include:

  1. Name and contact information, including email address
  2. Payment card information such as a credit or debit card number
  3. Financial information such as bank account information, credit history and income information
  4. Government issued identification information, such as a social insurance number or driver’s license number
  5. Profile information such as transaction history, usage information or browsing habits linked to an identifiable user (for example, through the use of an identifier such as an IP address, cookie or device identifier)
  6. Publicly available information, including information on social media


This privacy survey is intended to assess your readiness compliance with privacy law.  However, even if no compliance risks are identified, you should still seek legal advice since this is not a comprehensive list of all privacy law requirements.