How are access requests made?

While you can choose to respond to verbal or informal requests for access, the request must be in writing for the procedural access rules of Part X to apply.98 There is no requirement in the CYFSA for individuals to use a certain form or to submit the request in a certain way. Even if you’d prefer for individuals to make access requests by filling out a designated form, you must still respond to requests that come in other formats, such as email.

In addition, there is no requirement for a person requesting access to a record to specify that they are seeking access under Part X of the CYFSA. However, it may be helpful to clarify this with the requester in certain circumstances, such as where more than one privacy and access law could apply.

Access requests must include enough detail to enable you to identify and locate the record with reasonable effort. If a request does not contain enough detail, you must offer to assist the requester in clarifying the request.99 You should do so as soon as you receive a request that is not sufficiently detailed. Once the request contains sufficient detail, your 30-day timeline for response begins.

 

A former client emails you to request a copy of her complete file. She provides her first and last name, but no other identifying details. You check your case management system and see three people with the same name. This means you are unable to identify which are the requester’s records.

You assist the requester in clarifying her request by replying the following day to advise that you require additional information, such as her date of birth, to locate the records. One week later, you receive a reply containing the necessary information. At this point, the access request has been made, and you have 30 days in which to respond.

 

98. CYFSA, ss. 312(5) and 313. An individual making a verbal or informal request may only be granted access to a record of personal information to which they have a right of access (i.e., where there is nothing in the law that prohibits the release of the information).
99. Please see the IPC’s website for guidance about offering assistance in clarifying access requests.
Help us improve our website. Was this page helpful?

Note:

  • You will not receive a direct reply. For further enquiries, please contact us at @email
  • Do not include any personal information, such as your name, social insurance number (SIN), home or business address, any case or files numbers or any personal health information.
  • For more information about this tool, please see our Privacy Policy.