- Part X of the Child, Youth and Family Services Act: A Guide to Access and Privacy for Service Providers
- Download the Part X guide and other resources
- Terms used in this guide
- Introduction
- Does Part X of the CYFSA apply to you?
- Collection, use, and disclosure of personal information
- Consent and capacity
- Safeguarding and managing personal information
- Access to records of personal information
- Correction of records
- Offences and immunity
- Definitions
- FAQs
- Back to Guidance for organizations
Refusing or declining access
Your written response may also indicate that you are not providing access to some or all of the requested records.
If you cannot locate a record after a reasonable search — or if you have concluded that the record doesn’t exist, can’t be found or that Part X doesn’t apply to it — you must clearly indicate this in your response to the requester. You should also notify the requester of their right to file a complaint the IPC.
If you are refusing all or part of the request based on one of the access exceptions, you must give written notice to the requester that you are refusing access and that they are entitled to complain to the IPC. In most cases you are also required to inform the requester of any exceptions that apply, as follows:
You must inform the requester when one of the following applies:
- the information is subject to a legal privilege
- another act or a court order prohibits its disclosure to the individual
- the request is frivolous or vexatious or made in bad faith
You have discretion about how to inform the requester when one of the following access exceptions apply. You can choose to specifically indicate the exception that applies — or to indicate that one of them applies, without specifying which one. You can also refuse to confirm or deny the existence of any record subject to these exceptions106:
- the information was collected or created primarily in anticipation of or for use in a legal proceeding which has not concluded, or
- granting access could reasonably be expected to:
- result in a risk of serious harm to any individual107
- lead to the identification of an individual who was required by law to provide information in the record to the service provider or
- lead to the identification of an individual who provided the information either explicitly or implicitly in confidence, if you consider it appropriate to keep their identity confidential