How must a PI firm protect personal information in its files?
BC Private Investigator: B.C. PIPA: consent, investigations and public sources
How B.C.'s Personal Information Protection Act applies to PI firms: consent and deceptive practices, the investigation exception, prescribed publicly available sources, access requests, safeguards and retention, and restricted records.
- No sign-up
- Every answer explained
- Independent · not a government site
- 13 questions
- Topic drill
Study reference: B.C. private investigator law and public guidance (Oct 2026), Ch. 5 PIPA — PIPA ss. 1, 6–12, 15, 18, 23, 34, 35; PIPA Regulation s. 6
All 13 questions in this test
Every question and its answer choices. The correct answers and explanations appear when you take the test above.
How must a PI firm protect personal information in its files?
- By storing files in the investigator's car
- With reasonable security arrangements
- By emailing files to the client's friends
- By sharing copies with all staff
Which source is a prescribed publicly available source under the PIPA Regulation?
- A hacked database posted online
- A friend's private photo album
- A subject's unlisted phone records
- A published newspaper or magazine
What does a PI need before obtaining a subject's bank or tax records?
- A signed release and lawful authority
- A good reason written in the file
- The client's verbal approval
- A licence older than two years
A subject asks a PI firm what personal information it holds about them. What does PIPA generally require?
- Provide it only through the police
- Provide it only for a fee of $500
- Refuse, since PI files are always secret and belong only to the client
- Provide it and explain its use, with exceptions
When collecting information directly from a witness with their consent, what must the PI firm tell them?
- The purposes of the collection
- The subject's home address
- The fee charged to the client
- The client's full legal name
When may a published source NOT be used under the PIPA Regulation's public-source rule?
- When the publication charges a subscription
- When the subject has moved to another city
- When a court has banned publication of that information
- When the article was published more than five years before the search
When is a telephone directory listing a prescribed public source under the PIPA Regulation?
- Only when a court has approved its use
- When it is public and the subscriber could opt out
- Only when it includes a person's date of birth
- Only when the listing is less than a year old
Does B.C.'s PIPA apply to private investigation firms?
- Only for files involving children
- Yes, they are private organizations covered by PIPA
- No, PI firms are fully exempt from B.C. privacy law in all their work
- Only when they work for government
Information was used to make a decision directly affecting a person. How long must it be kept under PIPA?
- Until the person turns 65
- At least 30 days after the decision
- At least one year after the decision
- At least seven years after the decision
When may a PI firm collect personal information without consent for an investigation under PIPA?
- When asking would compromise the information and it is reasonable
- Whenever the subject has a criminal record
- Whenever the client has already paid a retainer in full for the investigation
- Whenever the information is older than a year
Under B.C.'s PIPA, what is personal information?
- Anything a company stores on paper
- Only medical and financial records
- Information about an identifiable individual
- Only information that has been marked as confidential by the person
Which matter fits PIPA's definition of an 'investigation'?
- Looking into a suspected breach of a contract
- Tracking an ex-partner's new friends
- Finding a celebrity's home address for a fan
- Checking a person's dating history for curiosity
A PI tricks a person into giving consent with false information about the purpose. Is the consent valid under PIPA?
- No, consent from deceptive practices is invalid
- Yes, if the person signed a form
- Yes, as long as the investigation itself had a lawful purpose
- Yes, if the client paid for the file
B.C. PIPA: consent, investigations and public sources: key rules to remember
Our summary of what the official handbook says on this topic, in our own words. Read it before or after the practice questions above, then check the original chapter. Read the official chapter ↗
Personal Information Protection Act (PIPA), SBC 2003 c. 63, ss. 1, 6–10
- PIPA governs B.C. private organizations, including PI firms and their clients; personal information is information about an identifiable individual (not business contact or work product information).
- Collection, use and disclosure need consent, deemed consent or a PIPA authorization; consent obtained through false or misleading information or deceptive practices is not valid.
- Organizations tell individuals the purposes on or before collecting from them.
Investigations
- "Investigation" includes an investigation related to a breach of an agreement, a contravention of a law, conduct that may give rise to a legal remedy, or the prevention of fraud.
- Personal information may be collected without consent if seeking consent would compromise its availability or accuracy and the collection is reasonable for an investigation or a proceeding; parallel rules allow use (s. 15) and disclosure (s. 18).
- Collection without consent is also allowed from prescribed publicly available sources (s. 12 (1) (e)).
Publicly available sources
- Telephone directories and directory assistance (if subscribers can opt out); professional or business directories (if listing is optional); public registries collected under a law; printed or electronic publications such as books, magazines and newspapers.
- Not usable if a court has banned publication of the information or the commissioner has ordered that it was published contrary to the Act.
Access, safeguards, retention
- Individuals may request their own personal information and how it was used, subject to exceptions.
- Reasonable security arrangements are required; information used to make a decision about a person is kept at least one year; then destroyed or anonymized when no longer needed.
Restricted information (general practice)
- An investigator should not obtain credit records, income tax or bank records without a signed release and lawful authority.
Study the B.C. PIPA: consent, investigations and public sources rules as flashcards →
Other topics
- Who needs a B.C. PI licence and how to get oneThe Security Services Act definition of a private investigator, who is exempt (lawyers, journalists, insurance adjusters, pre-employment screening), the PI and PI-under-supervision licences, the PSKN Introduction to Private Investigation course and exam, the 2,000-hour and police-experience routes, and out-of-province investigators.
- Licence rules, conduct and PI businessesCarrying and showing your licence, 14-day reporting, no uniform and no badge, the banned words detective and police, the B.C. code of conduct, business licences, insurance and records, enforcement and penalties, and why bug sweeping needs a security consultant licence.
- Courts, burden of proof and testifyingThe levels of Canadian and B.C. courts, the Civil Resolution Tribunal and Small Claims Court limits, criminal and civil burdens of proof, subpoenas, oaths, direct and cross-examination, and what counts as a crime for licensing.
- Arrest, force and criminal harassmentWhy a PI has only a citizen's powers, arrest without warrant under section 494, delivery to police, use of force under sections 25 to 27, 34 and 35, Charter rights, and how surveillance can cross into criminal harassment under section 264.
- Privacy Act, recording and surveillance limitsB.C.'s statutory tort of violation of privacy, its exceptions, eavesdropping and surveillance, use of a name or portrait, one-party consent to record under Criminal Code section 184, filming from public places, GPS trackers and criminal harassment.
- Human rights, the Charter and young personsB.C. Human Rights Code grounds in services and employment, the code of conduct's equality duty, the Charter, the Youth Criminal Justice Act's age definitions and declaration of principle, the publication ban, and interviewing people under 18.
- Mandate, surveillance and undercover workSetting a justifiable mandate, preparing for surveillance, standard equipment, obeying traffic law, detecting counter-surveillance, solo and team methods, subjects with lawyers, and the rules of undercover operations.
- Interviews, statements and reportsPreparing and conducting interviews, recording only with a party's consent, the parts of a written witness statement, corrections and initials, voluntariness, objective reports, correcting notes, and using notes in court.
- Evidence handling and information sourcesThe six steps for containing evidence, chain of custody, protecting original video, business and electronic records under the Canada Evidence Act, and lawful research sources such as directories, registries, PPSR and court files.
- Technology, countermeasures and safetyTechnical surveillance countermeasures and the security consultant licence, interception and computer-system rules, wireless cameras and GPS, authenticating electronic files, insurance, and WorkSafeBC rules for lone and at-risk work.