Canadian Information Privacy Protection Framework
CAN/DGSI 109-2
What this Standard Covers
This standard specifies minimum requirements for organizations that handle personal information in Canada, and which offer any benefit or consideration regardless of whether or not payment is made for it. It provides a baseline framework for organizations seeking to harmonize conformance to provincial/territorial, federal, and international legislation and treaties.
It is not intended to prescribe how an organization should implement controls, but instead provides guidance that is agnostic of jurisdiction and technology.
This standard applies to all sectors, including public and private companies, government entities, and not-for-profit organizations.
About this Standard
Edition
FIRST
Year Published
_
Intended for Conformity Assessment?
Yes
Comment on the Latest Draft
Drafts available for public review appear below
Draft number: D1
Date posted: 2023-03-13
Comments due by: 2023-05-12
Download This Standard
Our standards are always free for non-commercial use.
An interpretation has been added to this standard to clarify the meaning of a term used
HT Mega Addons
Current Status
Standard Proposed
In Development
Published
Annual Maintenance
This standard is subject to technical committee review beginning no later than one year from the date of publication. The completion of the review may result in a new edition, revision, reaffirmation or withdrawal of the standard.
Looking for a different standard?
See all standards currently in development or undergoing maintenance in our full Work Program