Rules
Is That ATIP Response Real? How to Verify Access to Information Records
Learn how to verify access to information request records from Canadian federal and provincial portals. Check release letters, exemptions, and file numbers.
What to take away
- A genuine federal ATIP response includes a release letter signed by an ATIP coordinator, with a file number and the date.
- Check the official federal portal or provincial freedom of information office before quoting any leaked record.
- Exemptions must cite a specific section of the Access to Information Act or a provincial act.
- If the file has no page numbers, no release letter, or no statutory exemption, treat it as unverified.
- A complaint to the Office of the Information Commissioner of Canada is the formal consequence when an institution fails to comply.
A leaked ATIP file can look official on a screenshot, but authenticity depends on details that are easy to check.
Federal jurisdiction for ATIP
Most federal institutions fall under the Access to Information Act, which gives the public a right to records held by government bodies. The Treasury Board Secretariat explains the process on its access to information and privacy page.
The law sets time limits and exemptions in the Access to Information Act, and some Crown corporations and business-related institutions have partial coverage under it. Provincial and municipal records fall under provincial freedom of information laws instead.
A separate guide covers how to find and request public records, step by step.
What a compliant ATIP disclosure contains
A compliant federal ATIP package should include the records, a release letter, and an index of exemptions. Each exempted passage must cite the section of the Access to Information Act used to withhold it. For example, a blank page will say "19(1)" for personal information or "21(1)(a)" for advice to government.
Page numbers on every sheet are another sign, and the package should also show the requester's file number and release date. A genuine release letter may note the requester's right to complain to the Office of the Information Commissioner.
Without them, a document may be a partial leak or an edited fake. Our guide to public document types and statuses explains how to tell an official release from a draft.
Records to keep after a request
If you are the requester, keep the original email, portal confirmation, and release letter; if you received a leaked file, ask for the full package, not just one page. The file number is the most useful detail for verification.
Keep a note of the ATIP office contact name from the release letter; that name helps if you later need to verify a copy. The Government records and public documents verification guide lists the details that make a record usable.
What happens if an institution does not comply
When a federal institution misses the 30-day deadline, refuses access without a valid exemption, or fails to cite the Act, complain to the Office of the Information Commissioner of Canada.
The Commissioner can investigate, issue recommendations, and refer the matter to the Federal Court. The Commissioner may name the institution in a report. A complaint is a concrete consequence, not just a threat.
Provincial differences in freedom of information
Each province has its own law, portal, and oversight body. The table below shows four examples. Federal records are checked through the ATIP portal, while provincial records go through provincial freedom of information offices.
| Jurisdiction | Governing law | Official portal or office | Oversight body |
|---|---|---|---|
| Federal | Access to Information Act | ATIP Online Request Service on canada.ca | Office of the Information Commissioner of Canada |
| British Columbia | Freedom of Information and Protection of Privacy Act | FOI request page on gov.bc.ca | Office of the Information and Privacy Commissioner for British Columbia |
| Ontario | Freedom of Information and Protection of Privacy Act | Freedom of Information request page on ontario.ca | Information and Privacy Commissioner of Ontario |
| Quebec | Access to documents held by public bodies and the protection of personal information | Access to information request page on quebec.ca | Commission d'accès à l'information du Québec |
A provincial FOI response should name the act, such as British Columbia's Freedom of Information and Protection of Privacy Act, and cite the relevant section. If you hold a leaked municipal or provincial page, check the province's freedom of information office.
Some provincial laws cover municipalities and universities directly. Others have separate access rules for police or health records. US state rules differ, but the same verification logic applies, as described in state public records compared.
Five verification steps
A genuine ATIP release letter is the single most reliable marker of an authentic federal response.
- Check the file number against the federal ATIP portal or provincial freedom of information office. Requesters can confirm whether that package was released.
- Look for a release letter signed by an ATIP coordinator. The letter should state the Act and list every exemption applied.
- Match page numbers and exemption codes. Federal exemptions cite specific sections of the Access to Information Act, such as 19(1) or 21(1)(a).
- Ask the requester for the original email or portal download notification. A screenshot alone is not enough.
- Contact the institution's ATIP office directly and quote the file number. A real office can verify the package.
These checks work the same way for provincial records, with the province's law in place of the Access to Information Act.
