Complete Guide to Filing a PIPEDA Complaint

A detailed walkthrough of filing a privacy complaint with the Office of the Privacy Commissioner of Canada, with sample language and timelines.

TL;DR

PIPEDA complaints follow a four-step process: raise the issue internally, file with the OPC, work with the investigator, and consider Federal Court if unsatisfied. Most complaints are resolved by mediation or findings within 12 months.

Before you file

Contact the organization's privacy officer in writing and state your complaint clearly. Give them a reasonable time (often 30 days) to respond. Keep copies of everything.

Filing with the OPC

Online at priv.gc.ca or by mail. Your submission should describe:

The organization's name and contact information.
A chronological account of what happened.
Steps you have taken to address the issue internally.
Copies of relevant correspondence.
The outcome you are seeking.

Timelines

You generally have 12 months from when you became aware of the issue.

The OPC will acknowledge receipt within a few weeks.

Investigations typically take 6-12 months, longer for complex cases.

After the Report of Findings

If the OPC finds your complaint well-founded and the organization refuses to implement recommendations, you can apply to the Federal Court. The Court can order damages and require specific corrective measures.