4.2 FIPPA, MFIPPA & Access to Public Records in Ontario

Key Takeaways

  • Public sector privacy and transparency in Ontario are governed by two distinct statutes: FIPPA for provincial ministries, agencies, colleges, and hospitals; and MFIPPA for municipal corporations, police services boards, school boards, and transit agencies.

  • Formal Freedom of Information (FOI) requests require a mandatory $5 application fee and impose a statutory 30-calendar-day deadline for public institutions to deliver an access decision.

  • FIPPA s. 14 and MFIPPA s. 8 allow institutions to refuse law enforcement records, while FIPPA s. 21 and MFIPPA s. 14 require refusal where disclosure would be an unjustified invasion of personal privacy, presumed for medical, employment, financial and law enforcement information.

  • The Information and Privacy Commissioner of Ontario (IPC) oversees public sector compliance, adjudicates access disputes, issues binding orders, and enforces strict operational guidelines on public-space municipal video surveillance.

  • Private investigators may lawfully examine open statutory registries (such as OnLand property titles, the Ontario Business Registry, and civil court files), but are strictly barred from accessing confidential law enforcement databases such as CPIC or internal MTO driver licensing systems.

Last updated: October 2026

Core Principle: In Ontario, public sector information is governed by a dual mandate: maximizing public transparency while vigorously safeguarding personal privacy. Private investigators frequently interact with public records but must understand the statutory boundaries under FIPPA and MFIPPA that separate accessible public archives from confidential government records.

While PIPEDA governs private-sector commercial organizations, public bodies in Ontario are regulated by two dedicated provincial statutes: the Freedom of Information and Protection of Privacy Act (FIPPA) and the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA). Licensed private investigators must master both frameworks to locate public records lawfully, understand FOI procedures, and avoid unlawful attempts to breach confidential government databases.


1. Provincial vs. Municipal Public Sector Privacy Frameworks

Ontario maintains a strict division between provincial government institutions and municipal public entities:

Statutory AttributeFIPPA (RSO 1990, c F.31)MFIPPA (RSO 1990, c M.56)
Jurisdictional LevelProvincial Crown and designated provincial agenciesMunicipal corporations and local governance bodies
Covered InstitutionsProvincial Ministries (e.g., Solicitor General, Attorney General), Ontario Provincial Police (OPP), Crown corporations, colleges of applied arts and technology, universities, and public hospitalsMunicipal city councils, municipal police services boards (e.g., Toronto Police Service), local boards of health, school boards, transit commissions, and public library boards
Core PurposeProvide public access to provincial records and protect personal privacy held by provincial bodiesProvide public access to municipal records and protect personal privacy held by local government bodies
Oversight BodyInformation and Privacy Commissioner of Ontario (IPC)Information and Privacy Commissioner of Ontario (IPC)

Both statutes operate under two foundational principles:

  1. Public Right of Access: Information held by government institutions should be open and accessible to the public, subject only to necessary, narrow, and specific statutory exemptions.
  2. Protection of Individual Privacy: Personal information held by government institutions must be protected against unauthorized collection, use, or public disclosure.

2. Access to Information Requests: Procedure, Fees, and Timelines

Private investigators conducting asset searches, historical background inquiries, or accident site analyses may submit formal Freedom of Information (FOI) requests to public institutions.

Submit Formal FOI Request + \$5 Mandatory Application Fee
                     │
                     ▼
Institution Logs Request & Issues Acknowledgment
                     │
                     ▼
30 Calendar Days: Statutory response window (unless extended)
                     │
         ┌───────────┴───────────┐
         ▼                       ▼
Full or Partial Access     Statutory Exemption Applied (Denial)
(Subject to search fees)   (Subject to IPC Appeal within 30 days)

Filing Procedure

To initiate a valid FOI request, the requester must:

  • Complete the institution's designated FOI application form or submit a written letter identifying the specific records sought with sufficient detail to enable an experienced employee to identify the file;
  • Address the request to the designated Freedom of Information and Privacy Coordinator of the specific institution; and
  • Enclose the mandatory statutory $5.00 application fee.

Statutory Timelines

Under Section 26 of FIPPA and Section 19 of MFIPPA, the institution has exactly 30 calendar days from the receipt of a complete request and application fee to deliver a formal written decision granting or refusing access.

An institution may extend this 30-day statutory timeline under Section 27 of FIPPA (or Section 20 of MFIPPA) only under narrow circumstances:

  • The request involves an unusually large volume of records, and searching would unreasonably interfere with normal operations; or
  • Consultations with external third parties or legal bodies are necessary and cannot reasonably be completed within the 30-day limit.

Allowable Fee Structures

Beyond the non-refundable $5 application fee, institutions may charge statutory processing fees established by provincial regulation:

  • Manual Search Time: $7.50 per 15 minutes ($30.00 per hour) spent manually searching for paper or electronic records;
  • Preparation and Redaction Time: $7.50 per 15 minutes ($30.00 per hour) spent reviewing records and applying mandatory severances;
  • Photocopies and Computer Printouts: $0.20 per page;
  • Direct Costs: Shipping, specialized software execution, or third-party retrieval fees.

If estimated search and processing fees exceed $25.00, the institution must provide the requester with a formal written fee estimate. If the estimate exceeds $100.00, the institution may demand a 50% deposit before commencing search activities.


3. Statutory Exemptions to Disclosure

The right to access government records is not absolute. FIPPA and MFIPPA contain mandatory and discretionary exemptions designed to protect sensitive public interests and personal privacy.

Law Enforcement Exemptions (FIPPA Section 14 / MFIPPA Section 8)

An institution may refuse to disclose a record where disclosure could reasonably be expected to:

  • Interfere with an ongoing law enforcement investigation or matter;
  • Reveal confidential investigative techniques and procedures currently utilized in law enforcement;
  • Endanger the life, physical safety, or security of a law enforcement officer, confidential informant, or any other person; or
  • Deprive a person of the right to a fair trial or impartial adjudication.

Private investigators cannot use FOI requests to circumvent active criminal investigations or obtain unredacted police occurrence logs regarding ongoing investigations.

Personal Privacy Protection (FIPPA Section 21 / MFIPPA Section 14)

Section 21 of FIPPA and Section 14 of MFIPPA prohibit the disclosure of personal information to third parties unless an explicit statutory exception applies (such as written consent from the individual).

The legislation establishes a statutory presumption of an unjustified invasion of personal privacy. Under these provisions, disclosure of personal information is legally presumed to constitute an unjustified invasion of privacy if the personal information relates to:

  • Medical, psychiatric, or psychological history, diagnosis, or treatment;
  • An individual's employment, occupational, or educational history;
  • Financial history, creditworthiness, personal assets, or tax assessments;
  • An individual's racial or ethnic origin, sexual orientation, or religious affiliations; or
  • Information compiled and identifiable as part of an investigation into a possible violation of law.

Because of these mandatory exemptions, when a private investigator requests municipal or provincial records (such as 911 dispatch calls, bylaw complaints, or building code enforcement files), the institution will redact all names, phone numbers, vehicle licences, and identifying descriptions before releasing the documents.


4. The Information and Privacy Commissioner of Ontario (IPC)

The Information and Privacy Commissioner of Ontario (IPC) is an independent officer of the Legislative Assembly appointed to oversee and enforce provincial compliance with FIPPA, MFIPPA, and the health sector privacy statute (PHIPA).

Powers and Adjudicative Authority of the IPC

  • Adjudicating Appeals: If an institution denies an investigator's FOI request, claims an excessive fee, or fails to respond within 30 days, the requester may file a formal appeal with the IPC within 30 days of receiving the refusal notice.
  • Binding Orders: The IPC conducts formal mediation and adjudication. An IPC Adjudicator has the legal authority to review unredacted records in camera and issue binding written orders requiring institutions to release records or upholding exemptions.
  • Privacy Breach Investigations: The IPC investigates public sector privacy complaints, conducts systemic audits of government databases, and orders institutions to rectify defective security practices.

IPC Guidelines on Video Surveillance in Public Spaces

Municipalities and police services boards frequently deploy closed-circuit television (CCTV) cameras in public squares, transit stations, and streets. The IPC has issued strict operational guidelines governing these systems:

  • Public surveillance must be demonstrably necessary to address verified public safety or crime deterrence needs;
  • Clear, prominent signage must be posted at the perimeter of the monitored zone notifying the public of the surveillance, the legal authority, and contact information for the operating body;
  • Cameras must be positioned to avoid capturing areas where individuals have an elevated expectation of privacy (such as residential apartment windows or interior private property);
  • Recordings must be stored securely, kept only as long as needed (institutions set their own retention periods), and preserved when needed as evidence.

5. Lawful Public Registries vs. Confidential Government Databases

A critical professional competency for an Ontario private investigator is distinguishing between open, statutory public registries that may be searched freely, and restricted government databases whose unauthorized access is strictly illegal.

┌────────────────────────────────────────┐  ┌────────────────────────────────────────┐
│       LAWFUL PUBLIC REGISTRIES         │  │     RESTRICTED GOVERNMENT DATABASES    │
│ (Open to Private Investigators for Pay)│  │   (Strictly Barred; Criminal/Offence)  │
├────────────────────────────────────────┤  ├────────────────────────────────────────┤
│ • Ontario Land Registry (OnLand)       │  │ • CPIC (Police Criminal Records)       │
│ • Ontario Business Registry (OBR)      │  │ • MTO driver/plate records, except as  │
│ • Civil Court Files & Judgments        │  │   MTO's own release rules permit       │
│ • PPSA Personal Property Liens         │  │ • OHIP Health Numbers & Claims         │
│ • Bankruptcy Insolvency Records        │  │ • Police dispatch (CAD) systems        │
└────────────────────────────────────────┘  └────────────────────────────────────────┘

Lawful Public Registries

  1. Ontario Land Registry (OnLand / Teranet): The provincial statutory system for land title registration. Investigators may search real estate parcel registers, deed transfers, registered mortgages, property transfer values, easements, and construction liens.
  2. Ontario Business Registry (OBR / formerly ONBIS): Provides public corporate filings, articles of incorporation, lists of corporate directors and officers, registered head office addresses, and business name registrations.
  3. Civil Court Dockets and Court Files: In accordance with the open court principle, civil pleadings, statements of claim, statements of defence, motion affidavits, and entered civil judgments in the Ontario Superior Court of Justice and Small Claims Court are accessible for public inspection upon payment of statutory court viewing fees.
  4. Personal Property Security Act (PPSA) Registry: Allows investigators to search for registered security interests, chattel mortgages, and vehicle identification number (VIN) liens on personal property, boats, and motor vehicles.

Confidential Government Databases (Access Prohibited)

  1. Canadian Police Information Centre (CPIC): The national automated law enforcement system operated by the RCMP. CPIC contains criminal convictions, active warrants, accused persons, peace bonds, and stolen property logs. Access is legally restricted to authorized law enforcement agencies. Private investigators cannot access CPIC directly. Paying or inducing a police officer or civilian employee to run a CPIC query exposes the investigator to bribery of an officer (Criminal Code s. 120) and the employee to breach of trust by a public officer (s. 122), and breaches the Code of Conduct's duty to comply with all laws.
  2. Ministry of Transportation (MTO) Driver and Vehicle Records: Driver and plate-owner information is released only as MTO's own rules allow, for example with the driver's written consent or to organizations approved under an MTO agreement for specific purposes. An investigator has no general right to turn a licence plate into a home address. Obtaining MTO information through informal contacts, pretexting or payments to clerks breaches privacy law and the Code of Conduct's duty to comply with all laws, and can be a criminal offence.
Test Your Knowledge

Under both FIPPA and MFIPPA, what is the statutory deadline for a public institution to respond to a formal Freedom of Information (FOI) request after receiving a valid request and application fee?

A

30 calendar days

B

15 business days

C

60 business days

D

90 calendar days

Test Your Knowledge

Which of the following information sources is a lawful, publicly accessible registry that a licensed private investigator may search without violating provincial privacy legislation?

A

The Canadian Police Information Centre (CPIC) database of active arrest warrants

B

Internal Ministry of Transportation (MTO) unredacted residential address vehicle logs

C

The Ontario Land Registry (OnLand) parcel register showing deeds and registered mortgages

D

The Ontario Ministry of Health OHIP database of hospital emergency room admissions

Test Your Knowledge

Under Section 21 of FIPPA and Section 14 of MFIPPA, when is disclosure of personal information held by a public institution legally presumed to constitute an unjustified invasion of personal privacy?

A

Whenever the requester is an accredited news media journalist or licensed private investigator

B

When it concerns medical or employment history, or was compiled to investigate a possible violation of law

C

Only if the individual has explicitly registered their name on a provincial do-not-disclose registry

D

Exclusively when the record concerns compensation paid to senior executives of public sector institutions

Sections you finish are checked off in the contents.