One regulation recorded for Canada in the panorama of IoT cyber security regulations, which compares every country that regulates the cyber security of connected products.
PIPEDA (Focus on privacy)
Personal Information Protection and Electronic Documents Act
| Question | Answer |
|---|---|
| Is the regulation in force? | Yes |
| Scope | All IoT systems (privacy-focused) |
| Who must follow the regulation? | IoT manufacturers |
| Mandatory or Voluntary? | Mandatory |
| Is there a label or a certification? | No |
| Does the regulation mandate baseline security requirements? | Yes |
| Are there additional requirements to the baseline security? | Yes |
| Does the regulation contains assurance levels? | No |
| Is compliance with ETSI EN 303 645 a requirement? | No |
| Can ETSI EN 303 645 be used to comply with the regulation? | Yes |
| Are other standards or guidance referenced? (cf. regulation) | Yes |
Every other country
Australia
Brazil
China
Egypt
European Union
Finland
Hungary
India
Japan
Kingdom of Saudi Arabia
Oman
Singapore
South Korea
Switzerland
Thailand
United Arab Emirates
United Kingdom
USA
Vietnam
Licence: Free to use for non-commercial purposes. Any use must credit cetome and link to cetome.com/panorama. The data is also open on GitHub.