VadeLab
DismissedFederal Court·

Federal Court Rejects PIPEDA Privacy Claim Due to Lack of Evidence

Case No.

📌 In brief

In a recent Federal Court case, an individual's application under PIPEDA was dismissed because they did not provide enough evidence to prove a violation of the act. The court ruled that the applicant failed to demonstrate that the organization had violated PIPEDA.

⚖️ Legal holding

An applicant must provide clear, convincing, and cogent evidence to prove a violation of PIPEDA.

Topics

Personal Information ProtectionElectronic Documents ActAccess Requests

Provisions

📖 Technical summary

The claimant's application under PIPEDA was dismissed due to insufficient evidence.

📜 Headnote Official document

The Federal Court dismissed an application brought under PIPEDA due to insufficient evidence proving a violation of the act. The court found that the applicant failed to meet the burden of showing a violation of PIPEDA that fell within the scope of subsection 14(1).

📚 Full judgment Official document

Date: 20260525 Docket: T-2668-25 Citation: 2026 FC 666 Toronto, Ontario, May 25, 2026 PRESENT: Madam Justice Whyte Nowak BETWEEN: [NAME] Applicant and [COMPANY]. Respondent

REASONS AND

JUDGMENT I. Overview [ 1 ] The Applicant, [NAME], brings this application pursuant to section 14 of the Personal Information Protection and Electronic Documents Act , SC 2000, c 5 [PIPEDA], in connection with an Investigation Report of an investigator of the Office of the [NAME] of Canada [[NAME]] dated June 17, 2025 [Report]. The Report found the Applicant’s complaint to be well-founded as the Respondent, [COMPANY]. [Respondent], failed to respond to an investigation into the Applicant’s complaint under PIPEDA. [ 2 ] Based on a de novo review of the Respondent’s conduct and the evidence before the Court, I am not satisfied that the Applicant has met his burden of showing a violation of PIPEDA that falls within the scope of subsection 14(1).

Accordingly, this application is dismissed.

II. Facts A. The Applicant’s privacy complaint [ 3 ] In an affidavit sworn August 14, 2025 [Affidavit], the Applicant states that on May 3, 2024, the Respondent blocked his access to his private corporate email account and transferred access to a third party without his knowledge or consent. According to the Affidavit, the email account included approximately 8,000 emails between the Applicant and his family, friends, accountants, [NAME] and the Canada Revenue Agency spanning approximately a 14-year period. The Applicant complained to the Respondent by email dated May 3, 2024 [Email], however, he says that the Respondent “took no meaningful steps to correct the situation.” [ 4 ] The Report states that the Applicant filed a complaint with the [NAME] on May 4, 2024 [Complaint]. [ 5 ] According to the Applicant, on the instructions of the [NAME], he sent the Respondent a registered letter dated October 18, 2024 [Registered Letter], requesting that the Respondent return his personal emails and take steps to ensure that the emails are not available to the third party to whom they were transferred, or any other party. According to the Applicant, he did not receive a response. B. The Decision [ 6 ] The relevant excerpts of the Report state: Enclosed you will find our report on the investigation of your complaint against [COMPANY]. (Bin There Dump That) in which you alleged that the organization failed to satisfy the legislative requirements for responding to your Personal Information Protection and Electronic Documents Act (PIPEDA) request. Subsection 8(3) of the Act provides that an organization must provide a response to a request for access to personal information with due diligence, and in any case no later than 30 days after the request is received… Subsection 8(5) of the Act states that if an organization fails to provide access to the requested information within the prescribed time limits, it is deemed to have refused access. Following the investigation into the complaint, we have concluded that the matter is well-founded. As the organization has failed to satisfy one of the subsections mentioned above (ss. 8(3)), as well as clause 4.9.4 under Principle 4.9 of PIPEDA’s Schedule I, in responding to an access request, we consider the matter to be a deemed refusal and have closed the file [original emphasis].

III. Preliminary Issues A. The Respondent’s motion to strike [ 7 ] On December 17, 2025, the Respondent attempted to file a motion to strike the Applicant’s application on the basis that it was improperly filed as a judicial review of the Report. The Registry Officer referred the documents back to the Respondent due to missing information related to whether the motion should be dealt with in writing or in person. As this is a minor irregularity, I am exercising my discretion under Rule 55 of the Federal Courts Rules , SOR/98-106 [ Federal Courts Rules ], to allow the motion and the Applicant’s response to be filed nunc pro tunc to allow the motion to be dealt with on its merits. [ 8 ] The Respondent is correct that an application under subsection 14(1) of PIPEDA is not a judicial review of the Report, rather it is a de novo review which considers the conduct of the party against whom a complaint is filed ( [NAME] v [COMPANY] , 2018 FC 1155 at para 20). The Applicant used a Federal Court form for a notice of application for judicial review, rather than Form 301. Despite reference to the application as a “judicial review,” the Applicant’s notice of application makes clear that the application is brought pursuant to section 14 of PIPEDA and he has properly framed the application as a review of the Respondent’s conduct and not the Report. The irregularity identified by the Respondent therefore falls squarely within Rule 57 of the Federal Courts Rules , which provides that “[a]n originating document shall not be set aside only on the ground that a different originating document should have been used.” The Respondent’s motion is therefore dismissed. B. The Respondent’s late filing of responding materials [ 9 ] Despite having been served with the Applicant’s affidavit evidence on August 15, 2025, it was not until May 1, 2026, that the Respondent sought to file a responding record containing an affidavit from its Chief Financial Officer [the CFO Affidavit]. The Respondent was advised by the Registry that it was late and leave of the Court would be required in order to accept it for filing. [ADDRESS] issued a Direction on May 4, 2026, advising the parties that they could speak to all filing issues at the start of the hearing. [ 10 ] On May 5, 2026, the Respondent again attempted to file a responding record containing the CFO Affidavit, a memorandum of fact and law as well as an additional affidavit from a law clerk. Again, the Registry refused the Applicant’s materials for filing. [ 11 ] Since being advised by the Registry that the Respondent required leave to file its responding motion record, the Respondent failed to take steps to address its non-compliance with the Federal Courts Rules including by bringing a motion for an extension of time to file its responding materials. At the hearing of the application, counsel for the Respondent suggested that the communications from the Court caused him to think that no further steps were required to obtain the Court’s leave. [ 12 ] The bottom line is that the Applicant does not consent to the filing of the Respondent’s affidavits and without a motion from the Respondent supported by affidavit evidence, I am not in a position to weigh the reasons for the Respondent’s delay (which spans over 7 months) against the intrinsic worth of the Respondent’s affidavits as the Court is required to do ( [NAME] v Canada (Public Service Commission) , 2003 FCT 4 at para 5, aff’d 2003 FCT 530, aff’d 2006 FCA 21). I am therefore refusing the filing of the Respondent’s affidavits based on sensible judicial authority that fairly holds that there is only one set of Federal Courts Rules to which all parties will be held ( [NAME] v Canada ([NAME]) , 2004 FCA 418 at para 8).

IV. Issues [ 13 ] The following issues are raised in this application: Has the Applicant shown a violation of PIPEDA? If so, has the Applicant shown his entitlement to any remedies? V. Analysis A. The Applicant has not shown the Respondent’s violation of PIPEDA (1) The scope of the alleged breach [ 14 ] The Applicant bears the burden of showing a violation of PIPEDA that falls within the scope of subsection 14(1) of PIPEDA. There are two limitations to the scope of the Court’s fact-finding inquiry into the Respondent’s conduct under this provision. [ 15 ] First, the Court is not limited to the matters referred to in the Report: subsection 14(1) permits an application to be brought in respect of “any matter in respect of which the complaint was made, or that is referred to in the Commissioner’s report.” [ 16 ] Second, the alleged breach must be in relation to one or more of the clauses which are not only referred to in Schedule 1 of PIPEDA [Schedule 1] but also listed in subsection 14(1). The principles in Schedule 1 are considered obligations with which those in the private sector should comply (PIPEDA, ss 5(1) and (2); [NAME] v [COMPANY] , 2018 FC 525 at para 19 [ [NAME] ]). [ 17 ] The Applicant’s evidence did not include a copy of the Complaint, and the Report refers only to an allegation that the Respondent “failed to satisfy the legislative requirements for responding” to his Complaint. The Report does not refer to the Applicant’s broader underlying concern over access to the Applicant’s personal information. [ 18 ] Accordingly, the Court is restricted to considering the Respondent’s failure to respond to the [NAME] which relates to subsection 8(3) of PIPEDA and clause 4.9.4 of Schedule 1, the latter of which provides that an organization shall respond to an individual’s request for access within a reasonable time and the requested information shall be provided or made available. B. Insufficient evidence of the alleged breach [ 19 ] The Applicant was required to show on a balance of probabilities that the Respondent failed to respond to his request related to access to his personal information. [ 20 ] The Applicant’s evidence is sparse and does not provide much in the way of background or an explanation of the circumstances leading to the Complaint. He has provided the Email and the Registered Letter he sent advising the Respondent of his privacy concerns related to a transfer of his corporate email account containing personal and privileged information. However, his Affidavit includes the statement that the Respondent “took no meaningful steps” to address his concerns, a statement which suggests that he may well have received a response from the Respondent to his Email but was unsatisfied with it. This critical gap in the evidence significantly impacts the Court’s ability to assess the Respondent’s conduct ( [NAME] v [COMPANY] , 2025 FC 1679 at paras 63, 99 [ [NAME] ]). [ 21 ] It was the Applicant’s burden to make out his Complaint and show a breach of a principle of PIPEDA ( [NAME] at para 67), based on evidence that is “clear, convincing and cogent” ( [NAME] v [COMPANY] , 2023 FC 166 at para 4 aff’d [NAME] v [COMPANY], 2023 FCA 189). I find that he has failed to do so. As the Court noted in [NAME] , a Court may provide “allowances” to a self-represented litigant, however this does not include excusing a party’s failure to put forward their case ( [NAME] at para 30). [ 22 ] As the Applicant has not shown the Respondent’s violation of PIPEDA, there is no need to consider his request for remedies. [ 23 ] No costs shall be awarded either on the Respondent’s motion to strike, or the application.

VI. Conclusion [ 24 ] The Applicant has not established that the Respondent’s conduct has breached a principle of PIPEDA;

accordingly, this application is dismissed.

JUDGMENT in T-2668-25 THIS COURT’S

JUDGMENT is that: The application is dismissed; and There is no order as to costs. "Allyson Whyte Nowak" Judge FEDERAL COURT SOLICITORS OF RECORD DOCKET: T-2668-25 STYLE OF CAUSE: [NAME] v [COMPANY]. PLACE OF HEARING: TORONTO, ONTARIO DATE OF HEARING: MAY 14, 2026

REASONS AND

JUDGMENT: WHYTE NOWAK J. DATED: MAY 25, 2026 APPEARANCES : [NAME] FOR THE APPLICANT (ON HIS OWN BEHALF) [NAME] FOR THE RESPONDENT SOLICITORS OF RECORD : [COMPANY] and Solicitors Toronto, Ontario FOR THE RESPONDENT

⚖️ What tends to weigh in cases like this

✅ Tends to be accepted

  • The court's review of the respondent's conduct was a new assessment, not a review of the initial report.
  • The court allowed the respondent's motion to strike to be filed late due to a minor procedural error.
  • The court was limited to considering the respondent's failure to respond to the privacy commissioner, not the broader issue of access to personal information.
  • The applicant's evidence was too sparse and lacked background information to properly assess the respondent's actions.
  • The applicant's statement that the respondent "took no meaningful steps" suggested a response was received, creating a critical gap in the evidence.
  • The applicant failed to provide clear, convincing, and cogent evidence to prove a breach of a PIPEDA principle.

❌ Tends to be rejected

  • The respondent's motion to strike the application was dismissed because the applicant's filing, despite its title, was properly framed as a review of the respondent's conduct.
  • The respondent's late-filed affidavits were not accepted because they did not seek leave of the court and the applicant did not consent.

Patterns observed in similar cases in this collection — every case is unique.

❓ Frequently asked questions

What did this decision decide?

The Federal Court dismissed the claimant's application under PIPEDA due to insufficient evidence.

What was the dispute about?

The dispute was about the claimant's privacy complaint regarding unauthorized access to their corporate email account containing personal information.

How did the court decide, and why?

The court decided to dismiss the application because the claimant did not provide sufficient evidence to prove a violation of PIPEDA.

Which laws or rules were applied?

The Personal Information Protection and Electronic Documents Act (PIPEDA) was applied, specifically subsection 14(1).

What was the argument that mattered most?

The most important argument was that the claimant failed to provide clear, convincing, and cogent evidence to prove a violation of PIPEDA.

Was the decision for or against the person who brought the case?

The decision was against the person who brought the case.

What does this mean for someone in a similar situation?

Someone in a similar situation should ensure they have strong evidence to support their claims when filing an application under PIPEDA.

What evidence or documents mattered?

The evidence and documents that mattered were the claimant's affidavit, email, and registered letter, which were found to be insufficient to prove a violation of PIPEDA.

Official source: Federal Court headnote and full judgment reproduced from the court's public records. View on the official source ↗Summary, holding, technical summary and questions: produced by Artificial Intelligence based on the official headnote and judgment. These are VadeLab’s own material and are not the work of the Court.This decision was issued by the Federal Court. It is a reproduction of an official work published by the Government of Canada, and the reproduction has not been produced in affiliation with, or with the endorsement of, the Government of Canada. It is not an official version.