If you’ve ever wondered how to access your personal information that may be stored outside of Canada by a public body in Nova Scotia, the Personal Information International Disclosure Protection Act (PIIDPA) is the legislation you need to know.
In an increasingly global digital world, data isn’t always stored where we live. That’s why PIIDPA exists to ensure that Nova Scotians maintain control over their personal information, even when it crosses borders.
Whether you’re an individual, a lawyer, or a business owner interacting with government-held data, this guide walks you through what PIIDPA is, when to use it, and how to file a request efficiently.
What Is PIIDPA?
The Personal Information International Disclosure Protection Act (PIIDPA) is a Nova Scotia law that protects personal information when it’s disclosed or stored outside of Canada by a public body or its service providers.
It applies to all government departments, municipalities, universities, and other public sector entities in Nova Scotia.
What are the Key PIIDPA Principles?
Public bodies must limit the storage and access of personal information to within Canada, unless specific conditions are met. Individuals have the right to request access to their personal information stored or accessed outside Canada.
When Should You Make a PIIDPA Request?
A PIIDPA request is appropriate when:
- You believe your personal data held by a Nova Scotia public body is stored in another country.
- You want to verify what specific information has been accessed or transferred internationally.
- You are concerned about compliance with Canadian data protection laws.
These requests are often used in tandem with FOIPOP (Freedom of Information and Protection of Privacy) requests, but PIIDPA is specifically focused on cross-border disclosures.
How to File a PIIDPA Request: Step-by-Step
Filing a PIIDPA request is straightforward — but requires precision. Here’s how to do it:
Step 1: Identify the Public Body
Determine which public sector organization in Nova Scotia holds the personal information. This could be a department, municipality, health authority, or university.
Step 2: Complete the PIIDPA Request Form
Download the official PIIDPA request form here: PIIDPA Access Request Form.
You’ll be asked to provide:
- Your full name and contact information.
- The name of the public body.
- A clear description of the personal information you’re requesting.
- The timeframe or event associated with the data.
- Any additional context to help locate the information.
Step 3: Submit Your Request
Send the completed form directly to the Review Officer at this email address, IAPServices@novascotia.ca:
What Happens After You File a PIIDPA Request?
Once your request is received:
- You’ll typically receive confirmation of receipt.
- The request is reviewed, and the relevant public body may be contacted.
- You will receive details about what personal data (if any) has been stored or accessed outside Canada, along with an explanation.
What are the possible outcomes after your PIIDPA request has been filed?
- Access to the data you requested.
- A clarification request for more details.
- A formal denial with reasons under the Act.
If you believe your request was unfairly denied, you can escalate the issue through the Office of the Information and Privacy Commissioner for Nova Scotia.
Tips for a Successful PIIDPA Request
Be clear and concise when describing the information you want. Include context, such as names of services, dates, or specific events. Double-check that you’re submitting to the correct public body.
Use the official form to standardize your submission.
Avoid vague requests like “all information ever stored about me.” The more specific you are, the more likely you will get a complete response.
Nova Scotia’s PIIDPA legislation ensures transparency and accountability for personal data that crosses borders. As data increasingly moves across global cloud infrastructures, PIIDPA empowers individuals to stay informed and in control.
Don’t hesitate to exercise your right to access this information. By understanding how and when to make a PIIDPA request, you’re taking an important step toward protecting your digital privacy in Canada.
Can I ask where my data is stored?
Yes. You have the right to request this information from a public body using a PIIDPA access request.
What if my data was shared without my consent?
You can file a complaint with the Information and Privacy Commissioner for Nova Scotia.
Who can make a PIIDPA request?
Any individual concerned about their personal information held by a Nova Scotia public body can file a request.
How long does it take to process a PIIDPA request?
Response times vary, but acknowledgment is usually sent within 30 days.
Can I combine a PIIDPA request with a FOIPOP request?
Yes. In fact, many requests involve overlapping concerns; one about access (FOIPOP) and one about cross-border storage (PIIDPA).
Is PIIDPA limited to government agencies?
Yes, PIIDPA applies to Nova Scotia’s public bodies, not private businesses.