If you’re a Canadian or someone who does business in Canada, the short answer is yes. The Personal Information Protection and Electronic Documents Act or PIPEDA holds organizations in Canada accountable for the protection of all collected personally identifiable information (PII) and gives Canadians recourse if ever their PII is compromised.