Which of the following is true in respect of privacy law in Canada?

A) Organizations in the private sector are subject to legislated responsibilities with respect to the personal information they collect.
B) Privacy protection is found primarily in the common law.
C) The power to enact privacy legislation has been exclusively granted to the federal government.
D) Privacy laws are generally considered unnecessary because voluntary privacy protection has been so successful.
E) The Personal Information Protection and Electronic Documents Act is designed primarily to regulate the government in its collection, use, and disclosure of personal information.

The Personal Information Protection and Electronic Documents Act (PIPEDA) is a key piece of legislation in Canada that imposes obligations on organizations in the private sector regarding the collection, use, and disclosure of personal information. This reflects the principle that privacy rights are protected by law in the private sector, not just through voluntary measures or primarily through common law. PIPEDA, contrary to option E, primarily regulates private sector organizations, not the government. Privacy laws in Canada are not seen as unnecessary (contrary to D), and the power to enact privacy legislation is not exclusively federal; provinces can also enact privacy laws, especially if they are deemed substantially similar to PIPEDA, which contradicts option C.