Skip to main content
FederalUpdated September 2026

Complete Guide to Filing a PIPEDA Complaint

A detailed walkthrough of filing a privacy complaint with the Office of the Privacy Commissioner of Canada, with sample language and timelines.

TL;DR

PIPEDA complaints follow a four-step process: the issue is raised with the organization, a complaint is filed with the OPC, the OPC investigates or mediates, and the Federal Court is available afterwards. PIPEDA requires the Commissioner to report within one year of the complaint, and the OPC currently warns of processing delays of several months.

Before you file

Contact the organization's privacy officer in writing and state your complaint clearly. Give them a reasonable time (often 30 days) to respond. Keep copies of everything.

Filing with the OPC

Online at priv.gc.ca or by mail. Your submission should describe:

  • The organization's name and contact information.
  • A chronological account of what happened.
  • Steps you have taken to address the issue internally.
  • Copies of relevant correspondence.
  • The outcome you are seeking.

Timelines

PIPEDA sets no fixed filing deadline, but the Commissioner may decline a complaint that was not filed within a reasonable period (s.12(1)(c)).

The Commissioner must prepare a report within one year of the complaint being filed (s.13(1)).

A Federal Court application after the report must be made within one year of the report (s.14(2)).

After the Report of Findings

If the OPC finds your complaint well-founded and the organization refuses to implement recommendations, you can apply to the Federal Court. The Court can order damages and require specific corrective measures.

Related topics

Ask AI