Where to complain if your issue involves a provincial government body, a health custodian, or a provincial private-sector organization in BC, Alberta, or Quebec.
TL;DR
The right commissioner depends on who holds your information. Each province has its own access-and-privacy commissioner (or ombudsman) that handles complaints under local legislation. Start by identifying whether the organization is public, private, or a health custodian.
Which commissioner handles your complaint
Use this quick reference:
Provincial government ministry or public body: FIPPA or equivalent, provincial commissioner.
Municipality: MFIPPA (Ontario), or the equivalent local legislation under provincial commissioners.
Provincial health custodian: PHIPA, HIA, HIPA, or equivalent, provincial commissioner.
Private-sector organization in BC/Alberta/Quebec: PIPA or Law 25, provincial commissioner.
As with PIPEDA, most provincial laws require you to raise the issue first with the organization's privacy officer. Keep written records. If not resolved, file within the prescribed time (usually 12 months).
What to include in your complaint
A strong complaint includes: the name of the organization, dates, the facts of what happened, a summary of what you did to try to resolve it, copies of relevant documents, and your desired outcome.