Canada's privacy law — the Personal Information Protection and Electronic Documents Act (PIPEDA) — applies to most private-sector background checks. Before you screen a single candidate, understanding your obligations can save your organization from fines and reputational damage.
What PIPEDA Requires
Under PIPEDA, you must obtain informed, meaningful consent before collecting personal information. For background checks, this means candidates must understand exactly what you are checking, why you need it, and how the information will be used.
- Obtain written consent from the candidate before ordering any check
- Only collect information that is necessary for the role
- Store results securely and limit access to those who need it
- Retain records only as long as necessary, then securely destroy them
Common Mistakes Employers Make
Many hiring teams run checks without proper consent forms, or collect more information than the role requires. Both are PIPEDA violations that can result in complaints to the Office of the Privacy Commissioner.
How Alero Keeps You Compliant
Every Alero check is built around a consent-first workflow. Candidates receive a clear, plain-language disclosure and sign off digitally before any data is collected. Our platform also manages retention and secure deletion so you don't have to track it manually.
Talk to our team to learn how we can build a compliant screening process for your organization.