Canada’s Consumer Privacy Protection Act (CPPA) Compliance

The Canada's Consumer Privacy Protection Act (CPPA) is a federal privacy law that applies to organisations that collect, use, or disclose personal information in the course of commercial activities. The Act sets out the rights of individuals with respect to their personal information and the obligations of organisations in collecting, using, and disclosing personal information.

The CPPA applies to organisations that collect, use, or disclose personal information in the course of commercial activities. This includes businesses, non-profits, and other organisations that collect, use, or disclose personal information as part of their operations. The Act applies to personal information that is collected, used, or disclosed in the course of commercial activities, regardless of whether the personal information is collected online or offline.

The Act gives individuals the right to know what personal information an organisation has collected about them, the purpose for which the information was collected, and who the organisation has disclosed the information to. Individuals also have the right to request that their personal information be corrected or deleted, and to object to the collection, use, or disclosure of their personal information.

Organisations are required to have policies and procedures in place to protect the personal information of individuals, and to be transparent about their data collection, use, and disclosure practices. They are also required to report any data breaches to the Privacy Commissioner of Canada and affected individuals.

How CPPA Affects Web Analytics?

When it comes to web analytics, there are several articles of the CPPA that are relevant.

Article 5 of the CPPA sets out the general principles for the collection, use, and disclosure of personal information, including the requirement that organisations obtain consent from individuals before collecting, using, or disclosing their personal information.

Article 7 of the CPPA requires organisations to protect the personal information they collect, use, or disclose, including by implementing appropriate security measures.

Article 8 of the CPPA sets out the rights of individuals with respect to their personal information, including the right to access their personal information and to request that it be corrected or deleted. Finally, Article 10 of the CPPA requires organisations to report any breaches of security safeguards involving personal information to the Privacy Commissioner of Canada and to affected individuals. These articles all have implications for the collection, use, and disclosure of personal information through web analytics.

Does Proxima Comply with CPPA?

Proxima Analytics takes the privacy of its users very seriously and is fully compliant with the Canada’s Consumer Privacy Protection Act (CPPA). To ensure compliance, we follow a number of best practices, including:

• Anonymising data through the use of hashing techniques. This means that we do not store personal information in a way that can be linked to a specific individual.
• Not storing raw data such as IP addresses or user agents. This helps to further protect the privacy of our users and ensures that we do not have access to sensitive personal information.
• Allowing users to turn off location, device, and operating system detection. This ensures that users have control over the information that is collected about them and can choose to limit the data that is shared with us.
• Not collecting biometric, genetic, mobile, or personal data. We do not track any sensitive information that could be used to identify or profile individual users.

Overall, Proxima Analytics is committed to ensuring compliance with the CPPA and to protecting the privacy of our users. We take every necessary measure to ensure that the data we collect is used responsibly and in a way that respects the privacy rights of our users.