Back to blog

Piwik PRO is a PIPEDA-compliant analytics vendor

Data privacy & security News & releases

Written by

Published June 11, 2024

Piwik PRO is a PIPEDA-compliant analytics vendor

The growing global trend for strong data protection laws is changing how organizations gather and use data. With privacy-focused product features and organizational processes, Piwik PRO is able to support companies in meeting the requirements of GDPR, HIPAA and many others. 

One of the regulations that Piwik PRO helps organizations comply with is the Personal Information Protection and Electronic Documents Act (PIPEDA), a Canadian data protection law.

Compliance with PIPEDA shows our commitment to privacy and proves that we take measures to protect data and mitigate a broad range of security risks. By using our platform, our clients get a better opportunity to do the same for their organizations. 

Below, we will explain how Piwik PRO helps you effectively collect users’ data and respect their rights.

What is PIPEDA

PIPEDA is the Canadian federal privacy law designed to protect consumers’ privacy rights. The law sets the ground rules and governs how private-sector organizations collect, use, and disclose personal information in the course of commercial activity across Canada.

The Canadian act also covers businesses operating outside of Canada that offer products or services to Canadian residents.

Under PIPEDA, personal information includes any factual or subjective information, recorded or not, about an identifiable individual. 

Examples of personal information include:

  • Age, name, ID numbers
  • Ethnic origin
  • Blood type
  • Opinions
  • Income, credit records, loan records
  • Medical records
  • Existence of a dispute between a consumer and a merchant

Key requirements of PIPEDA

The PIPEDA requirements are based on the 10 fair information principles of PIPEDA.

These principles include:

  1. Accountability – PIPEDA requires organizations directly covered by PIPEDA to appoint a Privacy Officer.’
  2. Identifying Purposes – Before or at the time of collecting personal information, organizations must identify and disclose the purposes for which the information is being collected.
  3. Consent – Organizations must obtain the individual’s consent before collecting, using, or disclosing personal information.
  4. Limiting Collection – The collection of personal information must be limited to what is necessary for the purposes identified by the organization.
  5. Limiting Use, Disclosure, and Retention – Personal information must only be used or disclosed for the purposes for which it was collected and for as long as necessary to fulfill them.
  6. Accuracy – Organizations must ensure that personal information is accurate, complete, and up-to-date as necessary for the purposes for which it is to be used.
  7. Safeguards – Organizations must implement security measures to protect personal information, appropriate to its sensitivity. The particular safeguards are not specified.
  8. Openness – Organizations must make their privacy policies and practices easily available to individuals.
  9. Individual Access – Individuals have a right to access their personal information, challenge its accuracy and have it amended.
  10. Challenging Compliance – Individuals must be able to challenge the organization’s compliance with PIPEDA’s requirements.

Learn more about PIPEDA and how to comply with it in our blog post: PIPEDA & CPPA: How the Canadian privacy laws impact your analytics.

How Piwik PRO helps clients comply with PIPEDA

Piwik PRO adopts privacy by design, which allows our clients to adhere to many data protection regulations, including PIPEDA. To better align with PIPEDA’s requirements, we have appointed a Privacy Officer (PO). As a third-party offshore vendor, Piwik PRO isn’t directly mandated to appoint a PO. However, the Privacy Officer helps us oversee compliance with the privacy requirements of our clients.

On top of that, Piwik PRO clients can benefit from product and organizational features that support their PIPEDA compliance. Specifically:

  • Using Piwik PRO’s Consent Manager, customers are able to:
  • Obtain the individual’s consent before collecting, using, or disclosing personal information.
  • Collect consents for different data collection purposes.
  • Limit data collection to what is necessary to fulfill the specific purposes.
  • Piwik PRO offers tools to effectively configure and limit data collection parameters to capture only relevant and accurate information, reducing the risk of collecting unnecessary or erroneous data. Our clients have full control over the tracking setup and can choose which data dimensions they collect by configuring their privacy settings.
  • Piwik PRO holds SOC 2 Type II and ISO 27001 certifications and continuously works with third-party security researchers, demonstrating the presence of high-level security safeguards.
  • Piwik PRO customers are informed about the disclosures they should make in their privacy policies detailing their use of Piwik PRO for data collection and processing.
  • Piwik PRO clearly defines its data retention and termination processes.
  • Piwik PRO enables and facilitates the collection and processing of individuals’ requests to access or amend the information gathered about them.

We are aware that maintaining legal compliance is an ongoing process. That’s why we will stay on top of PIPEDA’s requirements and any developments to ensure we adjust to them. 

Thanks to that, your team can focus on optimizing the customer journey on your site and benefiting from other features offered by our platform. 

Have any questions about PIPEDA-compliant analytics? Learn more about how we can help your organization comply with the law:


Małgorzata Poddębniak

Senior Content Marketer

Senior content marketer at Piwik PRO, copywriter, translator and editor. She started as a freelancer, gaining experience with creating versatile marketing content for various channels and industries. Later, she began working as a translator and editor, specializing in academic articles and essays, mainly in the field of history and politics. After becoming interested in SEO, she moved on to work as a content writer for a technical SEO agency. While there, she designed the company newsletter and planned and created in-depth articles, practical guides, interviews, and other supporting marketing materials. She joined Piwik PRO with extensive knowledge of technology, SEO, and digital marketing. At Piwik PRO, she writes about analytics, privacy, marketing, personalization, and data management and explains product best practices and industry trends for different industries.

See more posts by this author

Core – a new plan for Piwik PRO Analytics Suite

Privacy-compliant analytics, built-in consent management and EU hosting. For free.

Sign up for free

Upcoming live webinar

June 27, 2024

Real-time dashboards in Piwik PRO: A hands-on use case

This summer, we’re introducing new real-time dashboards in Piwik PRO Analytics Suite, empowering our clients to make informed decisions in time-sensitive projects. Would you like to learn how to use them in your daily work? Join our webinar to see how our partner agency, Netlife, used real-time insights to streamline the registration process for a major national event, ensuring a smooth user experience and preventing system breakdowns. Stay for a Q&A session where our experts will address all your questions.

Sign up for this webinar