What does PIPEDA require firms in Canada to do?

PIPEDA (Personal Information Protection and Electronic Documents Act) requires firms to obtain informed consent when collecting, using, or disclosing personal information.

B (prohibit disclosure) is too absolute; exceptions exist (e.g., legal requirements).

C (verify client ID) is under AML rules, not PIPEDA.

D (must provide service if info refused) is incorrect; firms may deny services if info is not provided.