As Canadians, two separate federal privacy laws protect our privacy. These laws govern the information that businesses can collect on other Canadians, as well as how organizations must manage and protect that data. As of January 1, 2004, PIPEDA applies to every organization that collects, uses or discloses personal information in the course of commercial activities. However, the federal government may offer an exemption organizations and/or activities in provinces deemed to have adopted substantially similar privacy legislation (more on this later).