The Personal Information Protection and Electronic Documents Act (PIPEDA) is a Canadian federal law that sets ground rules for how organizations must handle personal information. PIPEDA applies to all businesses that operate in Canada, and lays out 10 fair information principles covering collection, access, consent, and safe usage of personal information.