A bank's practice of charging individuals a flat fee for personal information requests was found to contradict the spirit of the Personal Information Protection and Electronic Documents Act ("PIPEDA"). Principle 4.9.4 of the PIPEDA requires an entity to respond to a request for personal information within a reasonable time and at minimal or no costs. The Assistant Commissioner found that an organization should only consider charging fees for processing a request when it is exceptional, and then only at minimal cost and with the individual's consent.
For a copy of the decision, visit:
http://www.privcom.gc.ca/cf-dc/2004/cf-dc_041021_02_e.asp