Process of Responding to a FIPPA Request
Request is Submitted and Received
An individual requesting access to information must submit a formal FIPPA request using the prescribed form, unless the individual has a limited ability to read or write English or French or a disability that prevents them from making a request in writing. The form can be downloaded from the . Individuals must provide enough detail about the information they are seeking so that the University can locate potentially responsive records.
Once a FIPPA request has been received, the University will generally issue a response within thirty days unless:
- The request has been transferred to another public body, or
- The time limit for responding is extended because:
- The applicant did not provide enough detail to enable the University to locate potentially responsive records,
- A large number of records is requested and responding within thirty days would interfere unreasonably with University operations,
- Time is needed to consult with a third party or another public body, or
- A third party makes a complaint regarding access.
Processing
Once a request for access is received, the Data Privacy and Compliance Office will contact those University employees who may be in the custody of records that are potentially responsive to the request. If potentially responsive records are located, the Information and Privacy Officer will examine the records to verify that they relate to the original request.
In some instances, the University is obligated or reserves the right not to release certain information to applicants. These exceptions to access are either mandatory or discretionary and include, but are not limited to, information that would:
- Unreasonably invade the privacy of a third party,
- Affect the business interests of a third party,
- Reveal confidential information within a public body,
- Reveal advice to or confidential deliberations of a public body,
- Affect individual or public safety, or the security of a property or system,
- Affect a law enforcement matter,
- Compromise solicitor-client privilege,
- Affect the financial situation or interests of a public body, or
- Reveal confidential evaluations about an applicant for a job or contract.
If a record contains information that falls under a mandatory or discretionary exception to access, but other parts of the record can be released, the excluded information will be severed from the record and the remainder released.
Requests for access may be subject to the payment of fees. If payment of fees is required, the University will provide the applicant with an estimate of fees before issuing a response.
Response Issued
Responses to access requests are made in writing. The Data Privacy and Compliance Office will send the applicant a letter that states whether the request has been granted or refused, in part or full. If access is granted in part or full, the letter will also indicate how access will be provided (generally by sending copies of the responsive records). If access is refused in part or full, the letter will state the reasons for the refusal and the specific provision(s) of FIPPA on which the refusal is based. The letter will also inform the applicant that they have sixty days to complain about the refusal to the Manitoba Ombudsman.
Requests for Correction
Individuals may make a request in writing to have their personal information corrected if they believe it to be inaccurate or incomplete. The University is not obligated to provide correction but will respond within 30 days. If the request is refused, the University will inform the individual in writing of the refusal. The University will also inform the individual of their right to complain to the Manitoba Ombudsman. If a correction is made, the University will, where practical, notify any other person to whom the personal information has been disclosed within the year before the request was made that the record has been amended.