PIPEDA Creates Confusion for Businesses

1
PIPEDA Creates Confusion for Businesses

• Brief Case - Page 288
• Presented by FA 14

2
Case Summary

• PIPEDA - Personal Information Protection and
  Electronic Documents Act.
• Many firms are having difficulties complying with
  the act due to problems surrounding
  interpretation, and application to their specific
  line of business.
• The CICA (Canadian Institute of Chartered
  Accountants) and the AICPA (American Institute
  of Certified Public Accountants) have put
  together a 70-page best practices guide to assist
  organizations with compliance.

3
Questions

• 1. What implications does PIPEDA have for a
  firms IT function?
• Several Implications - Consent, accountability
  and security are important considerations for
  firms.
• 2. Do you think that PIPEDA is good for Canadian
  businesses? Why or why not?
• It is a double-edged sword. Increases costs, and
  may raise compliance issues. Nevertheless -
  protects companys private information held by
  other firms.

4
Implications for

• Potential increased costs - petGRO currently has
  no formal security to protect information. It is
  likely that an investment in security is
  necessary to protect private information.
• Peace of mind - petGRO can trust that customers
  and vendors are held accountable for keeping
  petGROs private information safe.

5
Implications for the SMG

• Management intends to meet minimum compliance
  requirements for the PIPEDA.
• Management has no intention of hiring consultants
  or purchasing information regarding compliance.
• Managers are encouraged to view information
  online regarding PIPEDA through a dial-up
  account.

6
The End...