Canadian privacy & access decisions

A complainant alleged that a financial institution refused to respond to his access to personal information request related to a disputed credit card transaction. Initially, the financial institution withheld documents, claiming they contained confidential commercial information under PIPEDA s.9(3)(b). The OPC found this exemption was inappropriately applied and that the financial institution failed to respond within the statutory 30-day timeframe. Following the OPC's preliminary report, the financial institution provided further clarification, leading the OPC to determine that the information in question was not the complainant's personal information and was correctly redacted under s.9(1) as third-party information. Although the complainant eventually received all personal information he was entitled to, the OPC criticized the financial institution's delay and initial misuse of the exemption. The complaint was found to be well-founded and resolved.

• Whether the financial institution responded to the access request within the 30-day time limit required by PIPEDA s.8(3)
• Whether the financial institution sent a notice of extension within 30 days of the request as required by PIPEDA s.8(4)
• Whether the financial institution appropriately applied the confidential commercial information exemption under PIPEDA s.9(3)(b) to withhold documents
• Whether the withheld information constituted the complainant's personal information
• Whether the information was properly redacted as third-party information under PIPEDA s.9(1)