Private sector organizations can collect your personal information for legitimate and reasonable purposes; however, they must follow the personal information and privacy rules set out in the Personal Information Protection Act, which are based on the ten principles of privacy protection.
For example, the organization should identify the purpose for collecting personal information, including how it will be used, and obtain your consent for any personal information collected.
If you have concerns about how an organization has handled your personal information, your first step should generally be to raise the concern directly with the organization. If the organization does not resolve your issue, your next step would likely be to contact the Office of the Information and Privacy Commissioner.
For more information about your right privacy rights, please visit BC FIPA’s Get Help pages.
Updated 2024.09. 20
These pages were last updated and reviewed in the summer of 2024.
The information on these pages only contains general information and guidance; none of the information constitutes legal advice. If you have a specific issue that you believe is a legal problem, the best practice is to consult a lawyer.
The information is non-partisan, dynamic and ever changing. It is the result of FIPA’s research and public education programs.
If you note something that needs to be added, corrected, or removed, please contact us by email: fipa AT fipa.bc.ca.