Do I have to provide ID to get my information?

Agencies are required to take reasonable steps to protect the personal information they hold.(external link) This includes an obligation to verify the identity of someone requesting their own information.

What is reasonable will depend on the circumstances in each case, including the sensitivity of the information in question, the way in which the request is made, whether you’ve dealt with the agency before, etc.

If you have any concerns about the information you’ve been asked to provide in order to prove your identity as part of making a request for your information, we suggest you ask to speak to the agency’s privacy officer.

Updated October 2025