Skip to main content
Mohammad Movahedi logo
Book

Free bilingual letter builder

Exercise your access and correction rights, in the right words

PIPEDA and Quebec’s Law 25 both give you the right to see the personal information an organization holds about you and to have it corrected. Fill in the fields, pick your regime and language, and get a formatted letter with the correct statutory references – in English or in Quebec French.

Privacy promise: everything you type stays in this browser tab. No accounts, no cookies for your inputs, no network calls, nothing sent anywhere. The letter exists only until you copy or download it.

The generator

Build your letter

What are you requesting?
Letter language

Quebec organizations must be able to serve you in French; a French letter removes any ambiguity.

Fill in the fields, then press “Generate letter.”

Know your clocks

Response times, in plain language

PIPEDA

  • Your request must be in writing (s. 8(1)).
  • The organization must respond with due diligence, no later than 30 days after receipt (s. 8(3)).
  • It may extend by up to 30 more days in limited cases, with written notice of the new deadline, the reasons, and your right to complain (s. 8(4)).
  • No response in time counts as a deemed refusal (s. 8(5)).

Quebec Law 25

  • Address a written request to the enterprise.
  • The enterprise must respond within 30 days of receipt for access and rectification requests.
  • Silence at the deadline is treated as a refusal; you can then ask the Commission d’accès à l’information to examine the disagreement.
  • Consultation is free; reasonable fees may apply for transcription, reproduction, or transmission.

Keep a copy of your letter and proof of sending (registered mail receipt, email read receipt, portal confirmation). The 30-day clock runs from the organization’s receipt, so proof of delivery is your evidence if you need to complain later.

Show your work

Methodology and sources

Every statutory reference in the letters comes from the Act itself:

  • PIPEDA, Schedule 1, Principle 4.9: on request, an individual shall be informed of the existence, use, and disclosure of their personal information and shall be given access to it; clauses 4.9.5 and 4.9.6 cover challenging accuracy and recording unresolved challenges. Sections 8(1)–8(5) set the written-form requirement, the 30-day response duty, the extension rules, and the deemed-refusal rule. See the OPC’s access interpretation bulletin atpriv.gc.ca.
  • Quebec, Act respecting the protection of personal information in the private sector (RLRQ c. P-39.1), ss. 27–28:rights of access and rectification against an enterprise; the Commission’s guidance confirms the written-request form, the 30-day response time (s. 32), deemed refusal on silence, and the right to ask the Commission to examine a disagreement (cai.gouv.qc.ca).
  • The letters deliberately avoid asserting exceptions the organization might invoke (solicitor-client privilege, third-party information, statutory bars). If your request is refused on one of those grounds, that is the point to get counsel involved – not to argue it yourself in a second letter.

Common questions

Before you send

Which regime should I choose?
Roughly: Quebec Law 25 for organizations operating in Quebec or holding Quebec residents’ information; PIPEDA for most other Canadian private-sector organizations. Alberta and BC have their own private-sector statutes. When in doubt, a PIPEDA letter is the safe default outside Quebec – and you can send both.
Should I send it in French?
For Quebec organizations, yes – French is the default language of business, and a French letter avoids any back-and-forth. The generator’s French version is written in professional Quebec French with the same statutory references.
What if they ignore me or refuse?
Under PIPEDA, complain to the Privacy Commissioner of Canada. In Quebec, ask the Commission d’accès à l’information to examine the disagreement – you have 30 days from the refusal (or the missed deadline) to do so. Keep your proof of sending.
Can I ask on behalf of someone else?
Only with proper authority (for example, as a parent, guardian, or holder of a mandate). These templates are written for the individual’s own information; representing someone else raises authorization questions that belong in front of counsel.

Building a rights-request process for your organization?

The other side of this letter is an intake workflow that hits the 30-day clock every time. Get help designing one that holds up under regulator scrutiny.

Discuss your privacy needs

Disclaimer: these letters are templates built from the statutory provisions cited above – not legal advice, and not a substitute for counsel. Rights requests can raise exceptions (privilege, third-party information, sector-specific rules) that a template cannot resolve. Confirm anything contested with qualified legal counsel. This tool is maintained byMohammad Movahedi.