No. Doxxing—publicly revealing someone’s private information with intent to harm—violates multiple Canadian laws, including the Criminal Code and privacy statutes. Offenders face fines, imprisonment, or civil liability under provincial regulations. The Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial laws like Ontario’s Personal Information Protection Act impose strict limits on sharing personal data without consent. Recent 2026 amendments to the Electronic Commerce Protection Regulations further criminalize doxxing linked to cyberbullying or harassment, with penalties escalating for repeat offenses.
Key Regulations for Doxxing in Canada
- Criminal Code (s. 264, 372.1, 403): Prohibits threats, harassment, and unauthorized distribution of personal information with intent to harm, punishable by up to 5 years’ imprisonment. Section 372.1 explicitly targets doxxing as “publishing intimate images without consent.”
- PIPEDA & Provincial Laws: Organizations handling personal data must comply with federal and provincial privacy frameworks (e.g., BC’s Personal Information Protection Act), which restrict sharing without explicit consent. Violations trigger fines up to $100,000 under PIPEDA’s 2026 enforcement updates.
- Human Rights Codes: Provincial bodies (e.g., Ontario Human Rights Tribunal) may intervene if doxxing targets protected characteristics (e.g., race, gender), leading to non-monetary remedies or public censure.