INFORMATION PRIVACY
In today's digital economy, information can be shared more readily than ever before. Striking the right balance between realizing the benefits and efficiencies that automation of data collection can provide and protecting privacy of personal information is a challenge that many organizations face today. The purpose of this paper is to analyze privacy issues relating to access of personal information in an e-commerce environment. Canada's legislative response will be examined in terms of its effectiveness in addressing information privacy concerns. Specifically, the Personal Information Protection and Electronic Documents Act (PIPEDA) will be analyzed to determine whether or not it adequately addresses information privacy risks related to e-commerce. Particular emphasis is placed on two closely linked principles: consent and limiting use, disclosure, and retention. This paper argues that investing in these areas upfront can help to reduce costs associated with challenging compliance. Moreover, it is a combination of legislation, process and technology that all need to work together towards building a privacy-conscious information management practice. PIPEDA is not a stand-alone solution.