What PIPEDA requires
- Obtain meaningful consent. Get express consent when the information is sensitive, the use falls outside what people would reasonably expect, or it creates a meaningful risk of significant harm.
- Explain tracking for behavioural advertising clearly, at or before collection, and offer an easy opt-out that takes effect at once and lasts. Limit that tracking to non-sensitive information.
- Identify the purposes for collection before or at the time of collection.
- Limit collection to what is necessary for the stated purposes.
- Allow individuals to access and challenge the accuracy of their information.
- Safeguard personal information with appropriate security measures.
- Be open about your policies and practices.
How GrantCookie covers it
- Scheduled scans. The scanner finds the cookies and trackers your site sets, sorts them into categories and re-checks on every scheduled scan, so the banner asks about what is really there.
- Provable records. Every choice is timestamped and stored with the banner version the visitor saw. Paid plans include consent log export.
- Withdrawing consent. A re-open control stays on every page, so visitors can withdraw or change their choice at any time.
This page is general guidance. It is not legal advice. Check your specific obligations with a qualified adviser.