TL;DR: If a business mishandled your personal information, you can file a free complaint with the Office of the Privacy Commissioner of Canada (OPC) under PIPEDA, without a lawyer. First try to resolve it with the company’s privacy officer. PIPEDA covers personal information handled in commercial activity; Alberta, British Columbia and Quebec have their own laws that may apply instead. File online or by mail; the OPC’s line is 1-800-282-1376.
Does PIPEDA cover your issue?
According to the OPC:
- PIPEDA covers many private-sector organisations when they handle personal information during commercial activity.
- Not-for-profits and charities are generally excluded unless doing commercial work (fundraising doesn’t count).
- Alberta, British Columbia and Quebec have their own similar laws, which may apply if the information is handled entirely within that province. Quebec’s rules have been strengthened in recent years (our PIPEDA explainer covers the basics).
You won’t be the only one
The OPC’s 2025-26 annual report, tabled on 4 June 2026, recorded 3,044 PIPEDA complaints against businesses, up 109% on the year before. Businesses reported almost 700 breaches affecting more than 20 million Canadians. The OPC said the jump in complaints was likely linked to greater awareness of the process and easier access to it. It also closed 302 PIPEDA complaints through early resolution, a faster, informal route.
Step 1: talk to the company
The OPC encourages you to try to resolve it directly first, starting with the organisation’s Privacy Officer. Put your concern in writing: what happened, when, and what you want (access, correction, deletion, an explanation). Keep copies.
Step 2: file with the OPC
- It’s free, and you don’t need a lawyer.
- File online (preferred) or by downloading the form and mailing it.
- Filing for someone else? You need their written approval.
- Your name and complaint details will generally be shared with the business.
- Complaint files are kept for 10 years after completion.
- Questions: 1-800-282-1376.
An incomplete form can stop your complaint being processed, so include dates, names and copies of correspondence.
What happens next
Some complaints are closed through early resolution, an informal route where the issue is settled without a full investigation; the OPC closed 302 PIPEDA complaints that way in 2025-26. Others are investigated. Either way, your written record of what you asked the company and when is what moves things along, so keep every email.
Complaints about the government are different
If your complaint is about a federal institution (such as the CRA or IRCC), it falls under the Privacy Act, not PIPEDA. The OPC handled 3,146 Privacy Act complaints in 2025-26, and federal institutions reported about 450 breaches affecting more than 48,000 people.
Common reasons to complain
- a company won’t give you access to your personal information;
- a breach exposed your data and the company didn’t notify you properly;
- your information was used or shared without consent;
- a company keeps marketing to you after you withdrew consent.
After a breach
If you were caught in a breach like Loblaw or Crime Stoppers, you can ask the organisation what was exposed and how it’s protecting you, then complain to the OPC if you’re not satisfied. Meanwhile, protect yourself: add a fraud alert and check your email’s exposure with a free email exposure check.
Frequently Asked Questions
How many privacy complaints does the OPC get?
The OPC’s 2025-26 annual report recorded 3,044 PIPEDA complaints against businesses, up 109%, and almost 700 business breach reports affecting more than 20 million Canadians.
Can I complain about a government department?
Yes, but complaints about federal institutions fall under the Privacy Act, not PIPEDA. The same OPC handles both.
How do I file a privacy complaint in Canada?
Try to resolve it with the company’s privacy officer first, then file online or by mail with the Office of the Privacy Commissioner.
Does it cost anything to complain to the OPC?
No. Filing is free and you don’t need a lawyer.
Does PIPEDA apply in Quebec, BC and Alberta?
Those provinces have their own similar laws, which may apply when information is handled entirely within the province.
What is the OPC’s phone number?
1-800-282-1376 (toll-free).
Sources
- Office of the Privacy Commissioner: File a privacy complaint about a business
- OPC: Privacy Commissioner tables 2025-2026 annual report (Jun 2026)