Yukon: federal law, and one office wearing three hats
Your Yukon business falls under federal law. In the territory, a single office holds the ombudsman, privacy and public interest disclosure roles at once.
Which privacy law applies to a Yukon business that has its calls answered?
Federal law: the Personal Information Protection and Electronic Documents Act, PIPEDA. Yukon has no general private-sector privacy statute, and its access statute, ATIPP, S.Y. 2018, c. 9, reaches public bodies only.
The reason behind that result deserves to be stated properly: your business falls under federal law because the territory has no statute declared substantially similar, and not because a Yukon small business would be a federally regulated undertaking. The conclusion is the same; the reasoning, though, circulates in a short and inaccurate form.
A Yukon clinic also falls under the territorial health statute, HIPMA, in force since 2016. No federal order excludes it: the two regimes stack. This is not legal advice.
Three territories, one structure
Yukon, the Northwest Territories and Nunavut share the same structure: no general private-sector statute, an access statute reaching public bodies only, and federal law governing a small business's commercial activity. No territorial statute has received an exemption order.
We say that plainly rather than manufacture three distinctions where there is one per territory. In Yukon, the one that counts is how the oversight office is organised.
In all three, a customer complaint about a business's use of their information goes to the Office of the Privacy Commissioner of Canada.
One office, three roles
In Yukon a single office holds three roles: ombudsman, information and privacy commissioner, and public interest disclosure commissioner. No province has an equivalent of that combination.
It presents publicly under the Yukon Accountability banner, and also uses ombudsman addresses. Its jurisdiction covers the access statute, so public bodies, and the health statute, so custodians. It does not cover ordinary commerce.
We invent no French name for it: we found none, and Yukon does not sit under the same bilingual enactment regime as the Northwest Territories, Nunavut or Manitoba.
What we decline to cite, and why
We could not read the Yukon statute texts directly: the territory's official legislation site refused the connection on every attempt we made, on 15 September 2026.
The consequence is deliberate: you will find on this page no section number from the territorial health statute, and no description of its breach notice mechanism. Summaries in circulation give one; we do not repeat it without having read the provision.
What we do know holds: the health statute exists, it has been in force since 2016, it covers custodians, and no federal order has declared it substantially similar to federal law. A shorter page that is true beats a longer page that is approximate.
Recording a call, and the federal rule
The Criminal Code does not stop a business that is party to a call from recording it: the exception in section 184(2)(a), read with section 183.1, is satisfied by the consent of one party. Privacy law is a separate and cumulative regime.
It asks you to tell the caller at the start of the call about the recording and its purpose, to refrain from using it afterwards for another purpose, to offer a different route to someone who declines, to give access to the recording on request, and to limit retention. At Zenvox the disclosure is spoken before the microphone opens and cannot be switched off.
Since 1 November 2018: report to the federal commissioner and notify affected individuals of any breach of security safeguards creating a real risk of significant harm, and keep a record of every breach for 24 months from the day you conclude it occurred.
What leaves the territory
The split holds in the north too: territorial law, where it exists, governs what happens in the territory; federal law governs information moving out of the territory or out of the country. In Yukon, with no general territorial statute, federal law already covers the whole of it. What leaves in our case, and for how long, is written at the foot of this page; we do not rewrite it here.
Federally, nothing new is in force: Bill C-27 died on the Order Paper on 6 January 2025, and Bill C-36, tabled on 15 June 2026, stood at second reading on 15 September 2026, without royal assent.
What we read, and when
- Yukon Accountability — the office, its three roles, and filing a complaint
- Government of Yukon — health privacy information
- Canada Gazette — consolidated index of statutory instruments: the seven exemption orders, none for Yukon
- Breach of Security Safeguards Regulations, SOR/2018-64
Checked on
What the product puts on your side
Things checkable from outside, rather than a label granted to oneself.