The IWGCO maintains privacy in compliance with the Personal Health Information Protection Act (PHIPA) 2004, as well as taking into account the Personal Information Protection and Electronic Documents Act (PIPEDA). PHIPA establishes rules for the collection, use and disclosure of personal health information about individuals that protect the confidentiality of that information and the privacy of individuals with respect to that information, while facilitating the effective provision of health care. PIPEDA sets ground rules for how private sector organizations may collect, use or disclose personal information in the course of commercial activities.