Newfoundland & Labrador · ATIPPA, 2015

Access and privacy for Newfoundland & Labrador public bodies, in one platform

AccessPoint manages ATIPPA, 2015 access requests against Canada's tightest response clock — plus the privacy impact assessments and breach reporting the Act requires — pre-configured for Newfoundland & Labrador and running inside your own Microsoft 365 tenant.

Start Free Trial Request a Demo

Newfoundland & Labrador at a glance

Response deadline
20 business days — the strictest statutory clock in Canada (s. 16)
Extensions
None self-serve — every extension needs the Commissioner's approval, ruled on within three business days (s. 23)
Application fee
None — no charge for your own personal information; 10 to 15 hours of search time free before any hourly charge (s. 25)
Privacy impact assessments
Mandatory for executive-government departments and branches (s. 72)
Oversight
Information and Privacy Commissioner (recommendations; the public body must comply or go to court)
Languages
English (provincial French-language services available)

Built for Newfoundland & Labrador

One platform for the whole access-and-privacy mandate, pre-configured for this regime and running in your own Microsoft 365 tenant.

ATIPPA request lifecycle

Intake to disclosure on Newfoundland & Labrador's 20-business-day clock — with section 23 Commissioner-approved extensions, the mandatory and discretionary exemption catalogue, the section 9 public-interest override, and OIPC-ready records, all on Microsoft 365.

Privacy impact assessments

Run the section 72 PIA required of executive-government departments and branches — a guided questionnaire with screeners, an embedded risk register, and a defensible, exportable record OIPC can review.

Breach reporting to the OIPC

Log a privacy breach, assess the risk of harm, and get a live checklist of what must be reported to the Commissioner under section 64 and what affected individuals should be told, and by when.

OIPC reviews and the court backstop

Track reviews before the Information and Privacy Commissioner, record the head's decision on each recommendation within its 10-business-day window, and follow the section 50 path to the Supreme Court when a recommendation to release is contested.

Court-ready evidence

Every action lands on a hash-chained audit ledger — so when a matter heads to the Trial Division, the disclosure decision, its reasons, and the full history export as a court-ready evidence package.

In your own NL tenant

Every request, assessment, and record stays inside your own Microsoft 365 and Azure tenant — no third-party cloud, no cross-border transfers, no per-user fees.

The 20-business-day clock

Newfoundland & Labrador runs Canada's strictest response clock. AccessPoint keeps you on it.

No other Canadian jurisdiction is built to answer faster. ATIPPA, 2015 gives public bodies just 20 business days to respond, and — unlike everywhere else — a public body cannot extend on its own: every extra day must be approved by the Commissioner, who rules within three business days. AccessPoint computes the due date on the provincial business-day calendar the moment a request activates, tracks section 23 extension applications and their outcomes, and pauses the clock only where the Act allows — so the tightest deadline in the country becomes one you can actually meet.

20 business days The due date computed on the provincial calendar from the moment a request activates.
Commissioner-approved extensions No self-serve extensions — section 23 applications and the three-business-day rulings, tracked.
Never a missed clock Holds, allowed pauses, and reminders that keep every request inside the window.

Configured out of the box

Installing the ca-nl-atippa configuration pack seeds your tenant with everything this regime needs — a starting point you can adjust, not a lock-in.

Related guide: FOI Workflow Quick Check
  • ATIPPA, 2015 as the legal-authority and citation spine
  • The Newfoundland & Labrador statutory-holiday calendar and 20-business-day due-date rules
  • The ATIPPA mandatory and discretionary exemptions, colour-coded for redaction, with the section 9 public-interest override
  • Section 23 extension applications for Commissioner approval, with citations and the three-business-day ruling
  • The ATIPPA cost schedule — no application fee, free search-time thresholds, and reproduction costs
  • OIPC review grounds and dispositions, with the Supreme Court (Trial Division) declaration path
  • Section 72 PIA templates and section 64 breach-reporting workflows
  • ATIPPA correspondence templates with statutory wording

Newfoundland & Labrador Questions

How strict is the ATIPPA, 2015 response deadline?
Twenty business days — the tightest statutory clock in Canada (section 16). A public body cannot extend on its own: under section 23 every extension must be approved by the Information and Privacy Commissioner, who decides within three business days. AccessPoint computes the due date on the provincial business-day calendar, tracks extension applications and their outcomes, and applies only the clock pauses the Act allows.

What happens if the Commissioner recommends releasing records?
Newfoundland & Labrador is unusual. After a review the Commissioner issues a report with recommendations (section 48), and a public body that decides not to release the records must — within 10 business days — either comply or apply to the Supreme Court of Newfoundland and Labrador (Trial Division) for a declaration that it is authorized to refuse (sections 49–50). The burden is on the public body, not the applicant. AccessPoint tracks the head's decision, the clock, and the court path, with court-ready evidence from the audit ledger.

Does it handle PIAs and privacy breaches under the Act?
Yes. Section 72 requires privacy impact assessments for executive-government departments and branches, and section 64 requires reporting privacy breaches to the Commissioner. AccessPoint runs PIAs on a configurable questionnaire engine and works breaches to closure with a live notification checklist, all on the same platform with a full audit trail.

Where does Newfoundland & Labrador data reside?
Entirely within your own Microsoft 365 and Azure tenant. Requests, documents, assessments, and audit history never leave your control — no third-party cloud and no cross-border data transfers.

Run Newfoundland & Labrador Access and Privacy in One Platform

Try AccessPoint free for 30 days, pre-configured for Newfoundland & Labrador. No credit card required.

Start Free Trial