The application of the Personal Information Protection and Electronic Documents Act to charitable ...
Also available in French under the title : Application de la Loi sur la protection des renseignements personnels et les documents électroniques aux oeuvres de charité et aux organismes sans but lucratif
"As of January 1, 2004, PIPEDA applies to every organization that collects, uses or discloses personal information in the course of commercial activities. However, the federal government may exempt organizations and/or activities in provinces that are deemed to have adopted substantially similar privacy legislation. The Act also applies to personal information in interprovincial and international transactions by all organizations subject to the Act in the course of their commercial activities."
Office of the Privacy Commissioner of Canada