PIPEDA + Privacy Act
Canada's federal privacy framework requires organizations to protect personal information throughout its lifecycle, including at disposal. Provincial equivalents in Quebec (Law 25), Alberta, and BC impose additional destruction obligations with audit requirements.