Canada’s Children’s Privacy Code: What It Means For Your Organization

On October 20, 2026, the Office of the Privacy Commissioner of Canada (OPC) released its Children’s Privacy Code (“the Code”). It is not new legislation, but that does not make it optional. The Code lays out how the OPC reads the Personal Information Protection and Electronic Documents Act (PIPEDA) when children’s personal information is involved online, and it is a clear preview of what the regulator will look for in complaints and investigations.

Who is covered?

The Code applies to organizations subject to PIPEDA that handle personal information in the course of commercial activity through websites, apps, platforms or other digital tools. It covers anyone under 18, and it reaches services that are directed at children and services that are likely to be accessed by them.