Making a request
Your request should:
- Be in writing (some organizations accept online forms or email).
- Identify you as the requester with reasonable proof of identity.
- Describe the records you want with enough detail to locate them.
- Include a reasonable contact method.
Timelines
PIPEDA: 30 days, extendable up to 30 more days.
FIPPA/MFIPPA/FOIP: generally 30 days, with extensions for large or complex requests.
Health privacy statutes: typically 30 days, with some variation by province.
Fees and refusals
Organizations can charge reasonable fees for copying and preparing records but not prohibitive fees.
Organizations can refuse access in limited circumstances, such as when disclosure would reveal another person's confidential information or violate solicitor-client privilege.
If you are refused, you can appeal to the applicable privacy commissioner.