Nova Scotia
Nova Scotia: PIIDPA, and FOIPOP from 2027
Applies to: Public bodies, municipalities and their service providers.
The Personal Information International Disclosure Protection Act is the strictest in Canada. Public bodies and their service providers must ensure personal information is "stored only in Canada and accessed only in Canada," unless the individual consents or the head of the public body allows storage or access outside Canada "to meet the necessary requirements of the public body's operation" and reports it.
The Freedom of Information and Protection of Privacy Act, 2025 (Royal Assent 2025-10-03) repeals PIIDPA when it commences on 2027-04-01. Its section 76 bars a public body from disclosing, storing or permitting access from outside Canada unless done in accordance with regulations. The new rules apply to contracts committed on or after 2027-05-01; earlier contracts keep the old rules to term.
What to check in a listing
- Is the data stored in Canada? (Storage)
- Is it accessed only from Canada, including by the vendor's support staff and backups? (Support and backups)
The law and the regulator
- Personal Information International Disclosure Protection Act (2006, c. 3) · checked 2026-10-13
- Bill 150, Freedom of Information and Protection of Privacy Act (2025, c. 13) · checked 2026-10-13
- 2025 c. 13 statute text · checked 2026-10-13
A summary, not legal advice. Laws change; report a correction.