Explain the requirements under the Personal Information Protection and Electronic Documents Act.

This federal statute regulates the collection, use and disclosure of personal information, requiring that consent be obtained for these purposes. Organizations must limit use, disclosure and retention of personal information, ensure the accuracy of such information, protect it with security safeguards, and be open about their relevant policies and practices. Rights regarding access and complaints are also included.