Making a request
Your request should:
- Be in writing (some organizations accept online forms or email).
- Identify you as the requester with reasonable proof of identity.
- Describe the records you want with enough detail to locate them.
- Include a reasonable contact method.
Timelines
PIPEDA: 30 days, extendable up to 30 more days.
Provincial and municipal public bodies: Ontario FIPPA 45 business days (requests from July 1, 2026; MFIPPA follows from January 1, 2027), BC and Alberta 30 business days, most others 30 days, with extensions for large or complex requests.
Health privacy statutes: typically 30 days, with some variation by province.
Fees and refusals
Organizations can charge reasonable fees for copying and preparing records but not prohibitive fees.
Organizations can refuse access in limited circumstances, such as when disclosure would reveal another person's confidential information or violate solicitor-client privilege.
If you are refused, you can appeal to the applicable privacy commissioner.