Hosting.ca must follow a code for the protection of personal information, which is included in the Act as Schedule 1. The code was developed by business, consumers, academics and government under the auspices of the Canadian Standards Association.

The 10 principles that businesses must follow are:

  1. Accountability
  2. Identifying purposes
  3. Consent
  4. Limiting collection
  5. Limiting use, disclosure, and retention
  6. Accuracy
  7. Safeguards
  8. Openness
  9. Individual access
  10. Challenging compliance