A BC private sector business, including a private healthcare business, is governed by the Personal Information Protection Act, SBC 2003 c 63 when it handles personal information; US laws such as HIPAA do not apply. Public bodies are governed by the Freedom of Information and Protection of Privacy Act, RSBC 1996 c 165.
Dashboards that show individual customer or employee data should be limited to staff who need access.
Giving broad access to dashboards containing personal information can breach the reasonable security obligation in PIPA.
Browse the full Fulcrum Law Dictionary for related terms.
General information about British Columbia and Canadian law, current to October 2026. It is not legal advice.