What federal privacy law protects Canadians from unauthorized use of their personal information?
The Personal Information Protection and Electronic Documents Act (PIPEDA) governs how private-sector organizations collect, use, and disclose personal information in the course of commercial activity. Federal public institutions are covered by the Privacy Act. The Office of the Privacy Commissioner of Canada (OPC) enforces both laws and accepts complaints at priv.gc.ca.
Which provinces have their own substantially similar privacy legislation in Canada?
British Columbia, Alberta, and Quebec have provincial private-sector privacy laws deemed substantially similar to PIPEDA, meaning organizations in those provinces are subject to provincial law rather than PIPEDA for intra-provincial matters. BC is covered by PIPA (administered by the BC OIPC), Alberta by PIPA Alberta (administered by the OIPC Alberta), and Quebec by Law 25 (Bill 64), administered by the Commission d'acces a l'information.
How do I file a privacy complaint with the Office of the Privacy Commissioner of Canada?
Go to priv.gc.ca and submit a complaint online or by mail. You must first attempt to resolve the issue directly with the organization. The OPC will acknowledge your complaint, investigate if warranted, and issue findings. If the organization does not comply with the findings, the OPC can apply to Federal Court for a compliance order on your behalf.
What types of privacy violations can I complain about in Canada?
You can complain about an organization collecting more personal information than necessary, using or disclosing your information without consent, refusing to give you access to your own records, failing to correct inaccurate information, inadequate data security leading to a breach, and failure to notify you of a privacy breach that poses a real risk of significant harm.
How does the Ontario Information and Privacy Commissioner handle privacy complaints?
The Ontario IPC handles complaints under the Freedom of Information and Protection of Privacy Act (FIPPA) for provincial government institutions and the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA) for municipal bodies. Complaints about health information privacy fall under the Personal Health Information Protection Act (PHIPA). File at ipc.on.ca — the process is free.
How does the BC OIPC handle privacy complaints?
The Office of the Information and Privacy Commissioner for British Columbia (BC OIPC) at oipc.bc.ca handles complaints under the BC Freedom of Information and Protection of Privacy Act (FIPPA) and the BC Personal Information Protection Act (BC PIPA). The OIPC can investigate, mediate, and adjudicate privacy complaints. The process is free and does not require legal representation.
Is there a time limit to file a privacy complaint in Canada?
The OPC generally expects complaints to be filed within one year of the complainant becoming aware of the alleged violation. Provincial commissioners have their own timelines — Ontario PHIPA complaints should be filed within one year, and BC OIPC complaints should be filed within one year of the act or omission. File as soon as you become aware of the issue.
What remedies are available when a privacy complaint is upheld in Canada?
Remedies include orders to stop collecting, using, or disclosing information unlawfully; orders to provide access to records; orders to correct inaccurate information; orders to improve security practices; and in Federal Court proceedings, damages for privacy breaches. Under Quebec Law 25, the Commission d'acces a l'information can impose administrative monetary penalties.
Does filing a privacy complaint in Canada require a lawyer?
No. The OPC and all provincial privacy commissioners accept self-represented complaints. Investigation officers guide you through the process and gather information from the organization on your behalf. The process is free, conducted in writing, and does not involve hearings where you need to appear in person at early stages.
How does uplaw.ai help with privacy complaints in Canada?
Tell us the organization involved, the type of personal information at issue, and what you believe went wrong. We help you identify the correct privacy commissioner for your province and situation, understand the complaint form requirements, and write a clear account of the violation with the facts and legislation that support your complaint.
Free to start
Privacy violated? Tell uplaw.ai what happened.
No account required. uplaw.ai identifies the right commissioner and helps you draft a strong complaint.