The Privacy Act legislation and regulations

The Privacy Act governs how the federal government handles personal information that it collects, uses or discloses from the general public and its own employees.

The Act gives all individuals, whether they are inside or outside Canada, the right to request access to their personal information held by federal government institutions and request corrections to it.

Compliance

The Office of the Privacy Commissioner of Canada oversees compliance with the Act.

Individuals may complain to us about any issue described in section 29 of the Act. Some examples are:

• being denied access to your personal information
• receiving information that is not in the requested official language of Canada
• experiencing delays in receiving information

The Commissioner may also personally initiate a complaint against a federal institution or organization covered by the Act.

Related acts and legislation

• Access to Information Act
• Overview of privacy legislation in Canada

Related topics

• Investigations into federal institutions
• OPC involvement in Privacy Act judicial proceedings
• Summaries of leading Privacy Act Federal Court cases

Additional help

• Privacy Actcompliance help (for government institutions)
• The Privacy Act and public interest disclosures
• Privacy Impact Assessments
• Guidelines for the use of video surveillance of public places by police and law enforcement authorities
• Personal information retention and disposal: Principles and best practices
• What to expect during a complaint investigation under the Privacy Act (for complainants)

Privacy Act - R.S.C., 1985, c. P-21

This is an Act to extend the present laws of Canada that protect the privacy of individuals and that provide individuals with a right of access to personal information about themselves.

• Privacy Regulations (SOR/83-508)
• Designating the Minister of Justice and the President of the Treasury Board as Ministers for Purposes of Certain Sections of the Act (SI/83-109)
• Privacy Act Heads of Government Institutions Designation Order (SI/83-114)
• Privacy Act Extension Order No. 1 (SOR/83-553)
• Exempt Personal Information Bank Order, No. 5 (ND) (SOR/85-38)
• Privacy Act Extension Order, No. 2 (SOR/89-206)
• Exempt Personal Information Bank Order, No. 13 (RCMP) (SOR/90-149)
• Exempt Personal Information Bank Order, No. 14 (CSIS) (SOR/92-688)
• Exempt Personal Information Bank Order, No. 25 (RCMP) (SOR/93-272)
• Privacy Act extension order, No. 3 (SOR/2021-174)

The Act was introduced in 1983 and has not been substantially updated since then.

The OPC contributes to the reviews and makes recommendations on the Privacy Act. The OPC has continually urged the Government to update the Act to ensure that it adequately protects Canadians’ rights in an increasingly complex environment.

• Read about OPC efforts regarding Privacy Act reform
• Access amendments in previous versions of the Act