PIPEDA and Ontario Privacy Legislation
Federal PIPEDA establishes the baseline data protection obligation for Ontario private-sector organizations, including at end-of-life. Ontario public-sector organizations are governed by FIPPA (provincial institutions) and MFIPPA (municipalities), both of which impose data destruction obligations when personal information reaches end of life. A serialized certificate of data destruction tied to each asset provides the audit evidence these frameworks require.