Since 2000, The Personal Information Protection and Electronic Documents Act (PIPEDA) has governed the collection of Canadians’ consumer personal information. If a company knowingly violates the legislation, it can face fines of up to $100,000 per violation. Though the Act has successfully held hundreds of organizations responsible for data breaches and illegal disclosures over the past two decades, it now faces criticism for not providing enough discouragement to disclosure in today’s digital age.