Skip to main content
Home · Standards · British Columbia Personal Information Protection Act (PIPA)
Standard · BC PIPA

British Columbia Personal Information Protection Act (PIPA)

British Columbia's Personal Information Protection Act (PIPA, SBC 2003, c. 63) is the substantially-similar provincial private-sector privacy law that displaces PIPEDA for activities within BC. PIPA requirements for ITAD are similar to PIPEDA but with BC-specific notification obligations and Office of the Information and Privacy Commissioner (OIPC) of BC enforcement. Maxicom Canada engagements covering BC operations are structured to satisfy PIPA in admissible form.

BC PIPA scope

PIPA applies to private-sector organisations in BC. The Public Sector Freedom of Information and Protection of Privacy Act (FIPPA) applies separately to public sector. Maxicom certificates satisfy both simultaneously where the engagement spans private and public sector entities (rare but possible — e.g. crown corporations).

Vancouver enterprise IT engagement profile

Vancouver hosts BFSI back-offices (BC-based credit unions, BMO Harris regional ops, RBC Pacific operations), tech-sector enterprise IT (Lululemon, MEC, BC-based SaaS), and a substantial public-sector IT estate (BC government, BC Hydro, ICBC). Refresh cycles vary by sector.

Healthcare under BC PIPA + PHIPA-equivalent

BC healthcare engagements run under BC PIPA + the BC Health Authorities' privacy framework. PHI-grade chain of custody, witness destruction for top-classified PHI.

Regulator stack — by region Every Maxicom certificate is admissible against the full stack simultaneously UNIVERSAL NIST SP 800-88 Rev. 1 · IEEE 2883-2022 · DoD 5220.22-M · NAID-grade Protocol 🇮🇳 INDIA INR · IST PRIVACY DPDPA 2023 BFSI RBI IT-Risk SECTOR-SPECIFIC SEBI · IRDAI · CERT-In · CPCB 🇨🇦 CANADA CAD · EST PRIVACY PIPEDA · Quebec Law 25 BFSI OSFI Guideline B-13 SECTOR-SPECIFIC PIPA (AB/BC) · PHIPA · ITSG-33 🇸🇬 SINGAPORE SGD · SGT PRIVACY PDPA Section 24 BFSI MAS TRM SECTOR-SPECIFIC IMDA · NEA Resource Sustainability Act 🇦🇪 UAE AED · GST PRIVACY UAE PDPL Article 21 BFSI Central Bank UAE SECTOR-SPECIFIC TDRA · DIFC DPL · ADGM · NESA
Reviewed by the Maxicom compliance desk. Last updated April 2026.
Operates to NIST 800-88 · PIPEDA · OSFI B-13 · NAID-grade · IEEE 2883-2022
References

Authoritative references

Primary sources for the standards and frameworks referenced on this page. Maxicom maps every engagement to these recognised authorities.

Frequently asked questions

Frequently asked questions

How does BC PIPA differ from Alberta PIPA or PIPEDA?

Substantially similar to both. Maxicom certificates satisfy whichever law applies to the engagement jurisdiction.

What about FIPPA — does it apply to private-sector engagements?

No — FIPPA covers public-sector. Where an engagement spans crown corporations, both PIPA and FIPPA can apply; Maxicom certificates satisfy both.

When you are ready

Send the asset list. We will send the number.

A photograph of the rack works. A spreadsheet works better. CAD settlement, against PO.

purchase@maxicom.ca · per engagement SLA