That's correct. There are substantially similar private sector laws in British Columbia, Alberta, and Quebec. Intraprovincially, our law, PIPEDA, doesn't apply. It applies in the rest of Canada, and it applies to data flows across provincial borders.
On October 22nd, 2009. See this statement in context.