PIPEDA is a federal law that regulates the collection, use, and disclosure of personal information through commercial activity in Canada. It applies to all private enterprises and federal organizations, except in Alberta, British Columbia, and Quebec, which have their own similar provincial statutes.