Skip to content
Held in Canada

Nova Scotia

Nova Scotia: PIIDPA, and FOIPOP from 2027

Applies to: Public bodies, municipalities and their service providers.

The Personal Information International Disclosure Protection Act is the strictest in Canada. Public bodies and their service providers must ensure personal information is "stored only in Canada and accessed only in Canada," unless the individual consents or the head of the public body allows storage or access outside Canada "to meet the necessary requirements of the public body's operation" and reports it.

The Freedom of Information and Protection of Privacy Act, 2025 (Royal Assent 2025-10-03) repeals PIIDPA when it commences on 2027-04-01. Its section 76 bars a public body from disclosing, storing or permitting access from outside Canada unless done in accordance with regulations. The new rules apply to contracts committed on or after 2027-05-01; earlier contracts keep the old rules to term.

What to check in a listing

  • Is the data stored in Canada? (Storage)
  • Is it accessed only from Canada, including by the vendor's support staff and backups? (Support and backups)

Browse by tier or category.

The law and the regulator

A summary, not legal advice. Laws change; report a correction.