B.C.
British Columbia's Personal Information Protection Act (PIPA)
Last reviewed 2026-06-29 · Plain-language summary, not legal advice.
British Columbia's Personal Information Protection Act (PIPA) is the private-sector privacy law that governs most organizations operating in BC. It was enacted in 2003 and has been declared substantially similar to the federal PIPEDA — which is why, for personal information handled within the province, PIPA generally applies instead of the federal law. You can read the full statute on BC Laws: Personal Information Protection Act, SBC 2003, c. 63.
The same foundation as PIPEDA
PIPA rests on the same fair-information ideas as PIPEDA: organizations must have a reasonable purpose, obtain consent appropriate to the sensitivity of the information, limit collection to what is reasonable, protect the information with appropriate security, and give individuals access to their own information. If you understand the ten principles, you already understand most of PIPA's logic.
Where BC PIPA differs
The differences are practical rather than philosophical. Most notably, PIPA squarely addresses employee personal information: an organization may collect, use, and disclose information reasonably required to establish, manage, or terminate an employment relationship without consent, provided it has given the employee notice. PIPEDA only reaches employee data in federally regulated workplaces, so BC's treatment is broader and more explicit. PIPA also frames consent, access, and correction in the province's own statutory language, and sets its own response timelines.
Who enforces it
PIPA is overseen by the Office of the Information and Privacy Commissioner for British Columbia (OIPC BC), which investigates complaints and can issue binding orders — a stronger enforcement posture than the federal OPC's ombudsperson model under PIPEDA. Organizations that operate in BC and elsewhere often have to satisfy both regimes depending on where the data flows.
BC PIPA and the bigger picture
BC PIPA, Alberta's PIPA, and Quebec's Law 25 are the three substantially-similar provincial private-sector laws; everywhere else, PIPEDA is the private-sector baseline. Working out which one applies to a given activity is the first step in any Canadian privacy program — see federal vs provincial: which privacy law applies? Health information in BC is handled under separate rules; our provincial health privacy laws guide covers the health statutes across the country.
Common questions.
What is BC's PIPA?
BC's Personal Information Protection Act (PIPA), SBC 2003, c. 63, is British Columbia's private-sector privacy law. It governs how private-sector organizations in BC collect, use, and disclose personal information, and it has been declared substantially similar to the federal PIPEDA. Because of that designation, PIPA — not PIPEDA — generally applies to personal information handled within the province by BC organizations.
How is BC PIPA different from PIPEDA?
The two laws share the same fair-information foundation, but BC PIPA is a standalone provincial statute with some practical differences. It expressly addresses employee personal information through the concept of "employee personal information," which can be collected, used, and disclosed without consent where reasonable for managing the employment relationship and after notice. PIPA is overseen by BC's Office of the Information and Privacy Commissioner rather than the federal OPC, and its consent and access mechanics, while similar in spirit, are framed in the province's own terms.
Does BC PIPA cover employee information?
Yes, and this is one of its distinctive features. PIPA defines "employee personal information" and allows an organization to collect, use, and disclose it without consent where the information is reasonably required to establish, manage, or terminate the employment relationship, provided the organization has notified the employee. PIPEDA, by contrast, only reaches employee information for federally regulated workplaces.
Who enforces BC PIPA?
The Office of the Information and Privacy Commissioner for British Columbia (OIPC BC) oversees PIPA. It investigates complaints, conducts inquiries, and can issue binding orders. That independent order-making power is a notable contrast with the federal OPC's ombudsperson model under PIPEDA.