Express, informed consent
Explain the purpose and get opt-in before capturing a face.
Region · Canada
Face verification in Canada.
Canadian privacy law treats biometrics as sensitive, and Quebec adds specific biometric duties. Plan for express consent and careful retention.
PIPEDA · Quebec Law 25Key laws
What applies in Canada.
FED
PIPEDA
Requires meaningful consent; for sensitive data like biometrics, the Privacy Commissioner expects express consent and a clearly necessary, proportionate purpose.
QC
Quebec Law 25 & IT framework
Express consent for biometric verification, and the Commission d'accès à l'information must be notified before a biometric database goes into service (at least 60 days ahead).
AB/BC
Provincial PIPAs
Alberta and British Columbia have their own private-sector privacy acts with similar consent and reasonableness tests.
AML
FINTRAC
Reporting entities can use biometric-backed methods as part of identity verification under Canada's AML rules.
Your checklist
What you need to do.
Necessity & proportionality
Document why biometrics are needed and consider less intrusive alternatives.
Quebec CAI disclosure
Notify the CAI before bringing a biometric database into service.
Limit retention
Delete templates once the purpose is fulfilled.
How SIMSIM helps
Privacy-first by design.
Templates, not photos
Less sensitive data held, smaller breach impact.
Deletion by API
Honour withdrawal and retention schedules in code.
Processor terms
A DPA with the transfer terms your market needs.
FAQ
Questions from teams in Canada.
Is face verification allowed for KYC in Canada?
Yes, with express consent and proper safeguards. It's widely used for remote onboarding.
What's special about Quebec?
Quebec requires express consent for biometric verification and advance disclosure of biometric databases to the CAI.
Is my data transferred outside Canada?
Ask us about processing locations for your plan; PIPEDA permits transfers with comparable protection and transparency.
General information, not legal advice. Last reviewed 2026-09-30. Confirm requirements with qualified counsel.
Other regions
Operating in more than one market?
Building for Canada?
Start free, or talk to us about DPAs, processing locations and volume pricing.