Quick Answer
Start by contacting the organization's privacy officer. If that fails, file with the Office of the Privacy Commissioner of Canada (OPC, 1-800-282-1376) for private companies and federal institutions. Private companies in BC, Alberta or Quebec go to that province's own commissioner, and provincial or municipal bodies go to your provincial Information and Privacy Commissioner.
Where ComplaintCA Fits
ComplaintCA doesn't replace the Privacy Commissioner — it helps you identify whether your issue is federal or provincial, and drafts a clear, factual complaint in one of 7 supported languages. If your situation also involves a scam or phishing attempt, see ComplaintCA's cyber crime reporting guide.
No need to read this whole guide — Asya can ask a few questions and point you to the right body in seconds.
Start with Asya Now →
Which Privacy Law Applies in Your Province
Businesses are usually covered by the federal PIPEDA, except where a province has its own private-sector law (Québec, British Columbia, Alberta). Government bodies and health records have their own laws.
- Ontario: PIPEDA (businesses); FIPPA / MFIPPA (public bodies); Personal Health Information Protection Act, 2004 (health records)
- British Columbia: Personal Information Protection Act (BC, businesses); Freedom of Information and Protection of Privacy Act (public bodies)
- Alberta: Personal Information Protection Act (Alberta, businesses); Protection of Privacy Act (Alberta, public bodies); Health Information Act (health records)
- Quebec: Act respecting the protection of personal information in the private sector (Québec, as amended by Law 25); Access Act (public bodies)
- Manitoba: PIPEDA (businesses); The Freedom of Information and Protection of Privacy Act (public bodies); The Personal Health Information Act (health records)
- Saskatchewan: PIPEDA (businesses); The Freedom of Information and Protection of Privacy Act / The Local Authority Freedom of Information and Protection of Privacy Act (public bodies); The Health Information Protection Act (health records)
- Nova Scotia: PIPEDA (businesses); Freedom of Information and Protection of Privacy Act (public bodies); Personal Health Information Act (health records)
- New Brunswick: PIPEDA (businesses); Right to Information and Protection of Privacy Act (public bodies); Personal Health Information Privacy and Access Act (health records)
- Prince Edward Island: PIPEDA (businesses); Freedom of Information and Protection of Privacy Act (public bodies); Health Information Act (health records)
- Newfoundland & Labrador: PIPEDA (businesses); Access to Information and Protection of Privacy Act, 2015 (public bodies); Personal Health Information Act (health records)
- Yukon: PIPEDA (businesses); Access to Information and Protection of Privacy Act (public bodies); Health Information Privacy and Management Act (health records)
- Northwest Territories: PIPEDA (businesses); Access to Information and Protection of Privacy Act (public bodies); Health Information Act (health records)
- Nunavut: PIPEDA (businesses); Access to Information and Protection of Privacy Act (public bodies and health records)
Frequently Asked
How do I file a privacy complaint in Canada?
Raise it with the organization's privacy officer first. If unresolved, file with the OPC (private companies, federal bodies) or your provincial commissioner (BC, Alberta, Quebec, or any public body).
What is PIPEDA and who does it apply to?
Canada's federal private-sector privacy law — covers most businesses, except in BC, Alberta, and Quebec, which have their own similar laws.
How do I report a data breach?
Ask the organization if they've notified the Privacy Commissioner, as required for breaches posing real risk of harm. You can also file your own complaint with the OPC or your provincial commissioner.
Where do I complain about a government agency mishandling my data?
Federal institutions fall under the OPC and the Privacy Act. Provincial or municipal bodies (like a hospital or school board) fall under your province's own privacy commissioner.
What is ComplaintCA?
A Canadian civic complaint platform that routes you to the correct authority, with AI-assisted drafting in 7 languages, an MP finder, a lawyer panel, and cyber crime reporting support.
I'm Deaf or hard of hearing — how do I call a phone-only authority?
Use Canada VRS (free sign-language video relay, available 24/7) or dial 711 for a text-based relay operator — both let you place a real phone call to any number listed on this page.
Sources & Verification
This guide is maintained by ComplaintCA and checked against the official sources linked throughout, including:
Learn more about how ComplaintCA verifies information on our About page.
Related Guides
