Frameworks / Privacy

PrivacyComprehensive · 200–350 controls, expectedTopic framework

Canadian Privacy

Anchored on PIPEDA · Certify against: PIPEDA, Quebec Law 25 · Incorporates Alberta PIPA, BC PIPA, Ontario FIPPA/MFIPPA, Ontario PHIPA, OPC PIA Guide, IPC Ontario PIA Guide

One control set for organisations operating anywhere in Canada, anchored on PIPEDA with Quebec Law 25 as a certification profile and the provincial laws mapped in.

The standard tells you what is required; this framework tells you how to do it, whether you've done enough to certify, and how to keep getting better.

Two editions

Both editions come from the same framework and the same version. Professional adds what you need to implement it.

Core edition

For a team that wants the structure and will run it itself.

  • The framework workbook: Principles → Capabilities → Requirements → Controls, with implementation guidance on every control
  • Maturity criteria 0–5 and a certification threshold on every control
  • The framework as a designed PDF, and a two-page summary
  • Source mapping and a clause-coverage map for every certification profile
  • README, changelog and the Organisation Licence

A free sample, the summary and the first capability, will be here when the framework is published. The Professional edition includes the APEX import file, so the framework loads straight into the APEX Governance Platform. Framework purchases made within 12 months are credited in full against your first year of APEX Business or Enterprise.

Standards

Primary standard
Certification profile
Secondary standards

Standards are referenced by clause, not reproduced. Every standard we trace.

Profiles

Each profile is one standard's view of Canadian Privacy: its clauses, coverage and certification view.

Related frameworks

Questions about Canadian Privacy?

Tell us what you need to govern and we'll point you to the right framework and edition.

Enquire

Standards are referenced by clause, not reproduced. Names of standards and laws are trademarks of their owners; DP Frameworks is not affiliated with or endorsed by any standards body or regulator. Frameworks support governance and readiness; they are not legal advice or a regulatory submission.