On September 13, 2013, Manitoba joined Quebec, British Columbia
and Alberta by enacting provincial private sector privacy
legislation.
Once it comes into force, Manitoba's Personal
Information Protection and Identity Theft Prevention Act
(PIPITPA) will govern the collection, use and disclosure of
personal information, including that of employees, by organizations
in the private sector.
The Manitoba legislation has been modelled closely after
the Personal Information Protection Act
("PIPA") in Alberta; however, meaningful differences
exist. The most significant differences are summarized
below.
- Breach notification – PIPITPA includes a
broad breach notification obligation that requires an organization
to notify an individual if personal information about the
individual in its custody or under its control is stolen, lost or
accessed in an authorized manner, unless it is not reasonably
possible for the personal information to be used unlawfully.
Unlike in
