PrivacyBritish Columbia, CanadaIn force January 1, 2004

PIPA (BC)

Personal Information Protection Act (British Columbia)

BC's private-sector privacy law — recognized as substantially similar to PIPEDA

Run PIPA (BC) assessment ← All frameworks

Overview

BC PIPA governs the collection, use, and disclosure of personal information by private-sector organizations in British Columbia. It was recognized by the federal government as substantially similar to PIPEDA, creating a single-law framework for BC-based organizations. The OIPC BC has active enforcement and regularly issues investigation orders.

Authority

Office of the Information and Privacy Commissioner for BC (OIPC BC)

Jurisdiction

British Columbia, Canada

Effective date

January 1, 2004

Applicability

Who must comply with PIPA (BC)?

Private-sector organizations operating in British Columbia that collect, use, or disclose personal information for commercial activities. This includes sole proprietorships, societies, unions, and political parties in addition to corporations.

Compliance scope

Your organization collects personal information

You operate in the applicable jurisdiction

Commercial activities are involved

You use or disclose personal data

Not sure if PIPA (BC) applies? Run a free assessment →

Requirements

Key obligations under PIPA (BC)

Consent

Obtain consent from individuals before collecting, using, or disclosing their personal information — express or implied depending on sensitivity.

Notice of Collection

Inform individuals of the purposes for collection before or at the time of collection. They must understand what they are consenting to.

Retention Limits

Keep personal information only as long as necessary for the identified purposes. No indefinite retention.

Third-party Transfers

When transferring personal information to service providers outside BC, inform individuals and ensure comparable protection.

Employee Privacy

PIPA has specific provisions for employee personal information — limited collection rights and notification requirements.

Security Safeguards

Protect personal information with appropriate security measures against loss, unauthorized access, disclosure, copying, use, or modification.

Enforcement

Penalties & enforcement

Maximum penalty

$100,000 CAD for organizations

Enforced by: OIPC British Columbia

Notable case

BC Lions Football Club was found to have improperly disclosed employee medical information (2021)

How Canuckt keeps you penalty-free:

BC PIPA-specific gap assessment aligned with OIPC BC investigation priorities and guidance documents

Employee privacy policy templates that meet BC PIPA's stricter employee data requirements

Provincial compliance view showing where BC PIPA, PIPEDA, and Law 25 create overlapping obligations

Document retention schedule builder based on BC PIPA retention principle requirements

Frameworks that often overlap with PIPA (BC)

Privacy

PIPEDA

Canada's federal private-sector privacy law

Privacy

PIPA (Alberta)

Alberta's private-sector privacy law — substantially similar to PIPEDA

Privacy

Law 25

Quebec's sweeping privacy reform — Canada's strictest

Run a free PIPA (BC) gap assessment

Answer 47 questions, get a scored gap report, and see exactly what you need to do to comply with PIPA (BC) — in under 3 hours. Free forever.

Start free assessment

No credit card

Results in hours

Canadian data residency