BC PIPA vs PIPEDA: What is the Difference?
If you operate only within BC and are not a federal work, BC PIPA applies. If you cross provincial borders or operate federally, PIPEDA applies. Many BC businesses end up complying with both.
If your business operates entirely within British Columbia and is not a federally regulated work, BC's Personal Information Protection Act (PIPA) is your primary privacy law. PIPEDA, Canada's federal Personal Information Protection and Electronic Documents Act, applies when you operate across provincial lines or in a federally regulated sector. Many BC businesses must comply with both.
BC PIPA applies if:
PIPEDA applies if:
Most BC businesses with suppliers or customers outside the province will need to satisfy both frameworks. The good news: the two laws are closely aligned. A compliance programme that satisfies BC PIPA will cover most of PIPEDA's requirements with minor additions.
Yes. BC PIPA was amended in 2004 and has since been interpreted to require notification when a breach creates a real risk of significant harm to individuals. Significant harm includes bodily harm, damage to reputation or relationships, financial loss, identity theft, and loss of employment.
You must notify affected individuals in plain language, as soon as reasonably possible after the breach is discovered. You must also maintain a record of every breach and make it available to the OIPC BC on request.
Both laws require meaningful consent, but BC PIPA is more prescriptive about opt-in consent for sensitive categories of information. In practice:
Designing your consent flow to meet BC PIPA's higher standard will satisfy PIPEDA at the same time.
Is BC PIPA stricter than PIPEDA? In some ways, yes. BC PIPA's enforcement teeth, binding orders from the OIPC BC, are more direct than PIPEDA's recommendation-based process. BC PIPA's consent standards for sensitive data are also more explicit.
Does BC PIPA cover employee information? Yes. BC PIPA has specific provisions governing the collection, use, and disclosure of employee personal information, including limitations on workplace monitoring.
What happens if I get an OIPC BC complaint? The Commissioner investigates, attempts mediation, and can issue binding orders. Non-compliance with a binding order can result in court enforcement and penalties.
Do BC non-profits need to comply with BC PIPA? Yes, if they engage in commercial activity that involves collecting personal information.
Can North Star IT help with BC PIPA compliance? Yes. North Star runs BC PIPA and PIPEDA readiness assessments, drafts policies, and implements the technical security controls that both laws require.
Operating in BC and not sure which privacy law applies? Call 672-983-1174 or book a free compliance assessment at northstarit.ca. North Star serves businesses across Northern BC and BC.
Quick answers.
Which law applies to my BC business?
If you operate only within BC and are not a federal work, BC PIPA applies. If you cross provincial borders or operate federally, PIPEDA applies. Many BC businesses end up complying with both.
What is the main difference?
BC PIPA gives the BC Privacy Commissioner enforcement powers including binding orders. PIPEDA enforcement runs through the federal Office of the Privacy Commissioner, with cases going to Federal Court.
Do I have to notify breaches under BC PIPA?
Yes. BC PIPA was amended to require breach notification when there is a real risk of significant harm. The requirement closely mirrors PIPEDA.
Are the consent rules different?
Both laws require meaningful consent. BC PIPA is slightly more explicit on opt-in for sensitive information. In practice, the same consent design covers both.
Can Northstar IT help with compliance?
Yes. North Star runs BC PIPA and PIPEDA readiness assessments, drafts policies, and implements technical controls for Canadian SMBs.
Have a specific situation in mind?
Book a free 30-minute scoping call with a Northstar IT engineer. We will walk through your environment, your questions, and what good looks like for your team.
Get a Free Assessment More guides