A guide to requesting your personal information from a federal department, agency, or Crown corporation under the Privacy Act or Access to Information Act.
This page provides legal information, not legal advice. Consult a qualified privacy lawyer or CIPP/C-accredited privacy professional before taking action on access requests, breach response, complaints to a Privacy Commissioner, or Federal Court applications.
Last verified: September 2026
TL;DR
Federal institutions handle two types of requests: Privacy Act requests for your own personal information, and Access to Information Act requests for general records. Both use the ATIP Online Request Service at atip-aiprp.tbs-sct.gc.ca; general access requests cost $5 and Privacy Act requests are free.
Which request to file
File a Privacy Act request if you want your own personal information. File an Access to Information Act request if you want general records that do not focus on you. If you are not sure, file both.
How to file
Requests are submitted through the ATIP Online Request Service at atip-aiprp.tbs-sct.gc.ca or by mail.
Identify the correct department (the Info Source guide lists which department holds which records).
Describe the records you want with as much specificity as possible (dates, programs, topics).
For ATIA requests, pay the $5 application fee.
Timelines and responses
Both statutes require a response within 30 days.
Extensions can be applied for large or complex requests; you will receive a written extension notice.
If the department misses its deadline, it is deemed to have refused. You can then complain to the Privacy Commissioner or Information Commissioner.
If you are unsatisfied
Privacy Act complaints go to the OPC, which investigates and makes recommendations. Access to Information Act complaints go to the Information Commissioner within 60 days, and the Information Commissioner can issue binding orders (s.36.1). Either matter can proceed to the Federal Court under s.41 of the relevant Act.