A company shared your data without consent, or a government office mishandled your file? Canada's privacy complaint process splits between one federal body and your province's own — here's which one applies.
Which Body Handles What
| Situation | Who to complain to |
|---|---|
| Private company (most provinces) | Office of the Privacy Commissioner of Canada (OPC) — federal, under PIPEDA |
| Private company in BC, Alberta, or Quebec | That province's own privacy commissioner — these three have their own private-sector law instead of PIPEDA |
| Federal government institution | OPC — under the federal Privacy Act |
| Provincial/municipal government body (hospital, school board, city) | Your province's Information and Privacy Commissioner |
Report In This Order
1. The organization directly
Ask for their privacy officer — most organizations are required to have one, and many complaints resolve at this stage.
2. Office of the Privacy Commissioner of Canada (OPC)
For private companies (outside BC/Alberta/Quebec) and federal institutions.
File with the OPC — 1-800-282-1376 →3. Your provincial commissioner (BC, Alberta, Quebec, or public bodies anywhere)
Ontario's IPC, BC's OIPC, Alberta's OIPC, or Quebec's Commission d'accès à l'information — Ask Asya below with your province for the exact contact.
Common Privacy Complaint Types
- Data breach — your information was exposed and the organization didn't notify you, or you believe they mishandled the response.
- Unauthorized use or sharing — your data used or sold beyond what you consented to.
- Access request denied — an organization refused a request to see what personal data it holds about you.
- Government file mishandling — a public body exposed or mismanaged your personal file.
Where ComplaintCA Fits
ComplaintCA doesn't replace the Privacy Commissioner — it helps you identify whether your issue is federal or provincial, and drafts a clear, factual complaint in one of 7 supported languages. If your situation also involves a scam or phishing attempt, see ComplaintCA's cyber crime reporting guide.
No need to read this whole guide — Asya can ask a few questions and point you to the right body in seconds.
Start with Asya Now →Frequently Asked
How do I file a privacy complaint in Canada?
Raise it with the organization's privacy officer first. If unresolved, file with the OPC (private companies, federal bodies) or your provincial commissioner (BC, Alberta, Quebec, or any public body).
What is PIPEDA and who does it apply to?
Canada's federal private-sector privacy law — covers most businesses, except in BC, Alberta, and Quebec, which have their own similar laws.
How do I report a data breach?
Ask the organization if they've notified the Privacy Commissioner, as required for breaches posing real risk of harm. You can also file your own complaint with the OPC or your provincial commissioner.
Where do I complain about a government agency mishandling my data?
Federal institutions fall under the OPC and the Privacy Act. Provincial or municipal bodies (like a hospital or school board) fall under your province's own privacy commissioner.
What is ComplaintCA?
A Canadian civic complaint platform that routes you to the correct authority, with AI-assisted drafting in 7 languages, an MP finder, a lawyer panel, and cyber crime reporting support.
Sources & Verification
This guide is maintained by ComplaintCA and checked against the official sources linked throughout, including:
Learn more about how ComplaintCA verifies information on our About page.