Identify the right organization
Decide whether you are dealing with a business, a government body, or a health custodian, because each is covered by a different statute. Multiple organizations may hold different pieces of your information.
Write the request
A good request includes:
- Your full name and contact details.
- A clear description of the records you want and the time period.
- A reference to the law (e.g., 'I am making this request under PIPEDA').
- Proof of identity.
- A preferred format (paper, electronic).
Follow up and escalate
If you do not receive a response within 30 days, follow up in writing.
If the response is incomplete or refused, ask for written reasons.
If you are not satisfied, file a complaint with the applicable commissioner.