An individual requests access to personal information an organization holds about them. Under BC PIPA, what is a key obligation for the organization regarding this request?

Question: An individual requests access to personal information an organization holds about them. Under BC PIPA, what is a key obligation for the organization regarding this request?

Answer options:

• The organization must provide access immediately upon request. ✅ The organization must respond to the request within 30 business days and provide access or reasons for refusal.
• The organization can charge any reasonable fee for providing the information.
• The organization can refuse access if the information is too difficult to retrieve.

Correct answer: The organization must respond to the request within 30 business days and provide access or reasons for refusal.

Explanation: Under PIPA, section 29(1), an organization must respond to a request for access to personal information with due diligence and in any event not later than 30 business days after receiving the request. The organization must either grant access or provide reasons for refusing access under section 30.