of 'we don't collect personal information' may find that this does not make sense under a broader definition like that in the Australian Privacy Act. The term "PII" is not used in Australian privacy law. Canada Privacy Act governs the Federal Government agencies Ontario Freedom of Information and Protection of Privacy Act and similar Provincial legislation governs Provincial Government agencies Personal Information Protection and Electronic Documents Act governs private corporations, unless there is equivalent Provincial legislation Ontario Personal Health Information Protection Act and other similar Provincial legislation governs health information European Union European data protection law does not utilize the concept of personally identifiable information, and its scope is instead determined by non-synonymous, wider concept of "personal data". Article 8 of the European Convention on Human Rights The General Data Protection Regulation adopted in April 2016. Effective 25 May 2018 supersedes the Data Protection Directive – 95/46/EC Directive 2002/58/EC (the E-Privacy Directive) Directive 2006/24/EC Article 5 (The Data Retention Directive) Further examples can be found on the EU privacy website. United Kingdom The UK (Data Protection Act 2018) The UK Data Protection Act 1998 – superseded by the UK Data Protection Act 2018 General Data Protection Regulation (Europe, 2016) Article 8 of the European Convention on Human Rights The UK Regulation of Investigatory Powers Act 2000 Employers' Data Protection Code of Practice Model Contracts for Data Exports The Privacy and Electronic Communications (EC Directive) Regulations 2003 The UK Interception of Communications (Lawful Business Practice) Regulations 2000 The UK Anti-Terrorism, Crime and Security Act 2001 New Zealand The twelve Information Privacy Principles of the Privacy Act 1993 apply. Switzerland The Federal Act on Data Protection of 19 June 1992 (in force since 1993) has set up a protection of privacy by prohibiting virtually any processing of personal data which is not expressly authorized by the data subjects. The protection is subject to the authority of the Federal Data Protection and Information Commissioner. Additionally, any person may ask in writing a company (managing data files) the correction or deletion of any personal data. The company must respond within thirty days. United States The Privacy Act of 1974 (Pub.L. 93–579, 88 Stat. 1896, enacted 31 December 1974, 5 U.S.C. § 552a), a United States federal law, establishes a Code of Fair Information Practice that governs the collection, maintenance, use, and dissemination of personally identifiable information about individuals that is maintained in systems of