The Personal Information Protection and Electronic Documents Act (PIPEDA) applies to: private sector organizations that are not subject to provincial privacy legislation; organizations that collect personal information that crosses provincial or national boundaries; or organizations that are engaged in a “federal work, undertaking, or business” within the legislative authority of Parliament.