Health Information and Privacy

Decision Information

Summary:

The complainant asked Medcare Pharmacy for their pharmacy records. The pharmacy issued a $150 fee invoice for three pages of records. The complainant paid the fees to obtain the records and then requested a review of the fees. In this decision, the decision-maker does not uphold the fee and finds that it should be $30. They order the pharmacy to provide the complainant with a refund of $120.

Decision Content

Logo of the Information and Privacy Commissioner of Ontario, Canada / Logo du Commissaire à l'information et à la protection de la vie privée de l'Ontario, Canada

PHIPA DECISION 304

Appeal HA25-00100

Medcare Pharmacy

September 26, 2025

Summary: The complainant asked Medcare Pharmacy for their pharmacy records. The pharmacy issued a $150 fee invoice for three pages of records. The complainant paid the fees to obtain the records and then requested a review of the fees. In this decision, the decision-maker does not uphold the fee and finds that it should be $30. They order the pharmacy to provide the complainant with a refund of $120.

Statutes Considered: Personal Health Information Protection Act, 2004, as amended, sections 54(10) and 54(11).

Orders/Decisions Considered: Orders HO-009, HO-014; PHIPA Decisions 17 and 111.

OVERVIEW:

[1] On October 20, 2023, the complainant (through their representative) asked Medcare Pharmacy (the pharmacy) for access under the Personal Health Information Protection Act, 2004 (the Act or PHIPA) to their pharmacy records for a specified period.

[2] On November 3, 2023, the custodian issued a fee invoice for $150.[1]

[3] Subsequently, the representative requested a breakdown of the fee. The pharmacy advised that the fee invoice was for providing three pages of records.

[4] On March 27, 2024, the complainant paid the fee and on April 12, 2024, the complainant received the records.

[5] On March 13, 2025, the complainant asked the Information and Privacy Commissioner of Ontario (IPC) to review the fee.

[6] On June 19, 2025, the IPC contacted the pharmacy and was advised that a response would be provided.

[7] On June 23, 2025, the pharmacy stated that it would issue the requested refund.

[8] The IPC followed up with the pharmacy numerous times but was unable to obtain confirmation that it had issued the refund.

[9] On August 13, 2025, I decided to conduct a review and issued a Notice of Expedited Review, requesting representations from the pharmacy on the issue of fee.

[10] The pharmacy did not provide any representations.

[11] On August 29, 2025, I advised the pharmacy that I would proceed to a decision if I did not receive a response or the refund was not issued by September 3, 2025. The pharmacy did not respond or issue the refund by September 3, 2025.

[12] In this decision, I do not uphold the pharmacy’s fee and find that it should be $30. I order the pharmacy to provide the complainant with a refund of $120.

DISCUSSION:

Preliminary issues

[13] Based on the information before me in this complaint, I am satisfied that:

  • the requested records are records of personal health information, as defined in sections 2 and 4 of the Act;[2] and
  • the pharmacy is a health information custodian as defined in paragraph 4 of section 3(1) of the Act.[3]

Issue: Should the pharmacy’s fee for the records be upheld?

[14] The Act contains provisions about the payment of fees by a requester. Sections 54(10) and (11) of the Act allow a health information pharmacy to charge a fee for access, after giving an estimate. These sections state:

54(10) A health information custodian that makes a record of personal health information or a part of it available to an individual under this Part or provides a copy of it to an individual under clause (1) (a) may charge the individual a fee for that purpose if the custodian first gives the individual an estimate of the fee.

54(11) The amount of the fee shall not exceed the prescribed amount or the amount of reasonable cost recovery, if no amount is prescribed.[4]

[15] The issue of the validity of a fee charged under the Act is reviewed in PHIPA Decision 17. In that decision, the fee provisions at sections 54(10) and (11) of the Act are discretionary and they “confer a discretion on the [custodian] to charge an individual who requests access to records of [their] own personal health information a fee for access that cannot exceed the ‘prescribed amount,’ if one exists, or the ‘amount of reasonable cost recovery.’”

[16] As there are currently no prescribed fee amounts under the Act, in this review, I must determine whether the fee charged by the pharmacy exceeds the “amount of reasonable cost recovery” as contemplated by section 54(11) of the Act. The “amount of reasonable cost recovery” is not defined in the Act. However, the IPC has previously considered the meaning of this phrase for the purposes of the fee provisions in the Act .[5] Applying the purposive approach to statutory interpretation, the IPC has concluded that the phrase “reasonable cost recovery” in the Act does not mean “actual cost recovery”, or full recovery of all the costs borne by a custodian in fulfilling a request for access to an individual’s own personal health information. The IPC has also concluded that the use of the word “reasonably” to describe cost recovery suggests that costs should not be excessive, and that, as a whole, section 54(11) must be interpreted in a manner that avoids creating a financial barrier to the important purpose of the Act - to grant a right of access to one’s own personal health information.

[17] These past IPC orders/decisions concluded that a fee scheme set out in a proposed regulation to the Act, published by the Minister of Health and Long-Term Care in 2006 (the 2006 framework),[6] though never adopted, provides the best framework for determining the amount of “reasonable cost recovery” under the Act. The 2006 framework adopted in those orders/decisions and in this review reads as follows:

25.1(1) For the purposes of subsection 54(11) of the Act, the amount of the fee that may be charged to an individual shall not exceed $30 for any or all of the following:

1. Receipt and clarification, if necessary, of a request for a record.

2. Providing an estimate of the fee that will be payable under subsection 54(1) of PHIPA in connection with the request.

3. Locating and retrieving the record.

4. Review of the contents of the record for not more than 15 minutes by the health information custodian or an agent of the custodian to determine if the record contains personal health information to which access may be refused.

5. Preparation of a response letter to the individual.

6. Preparation of the record for photocopying, printing or electronic transfer.

7. Photocopying the record to a maximum of the first 20 pages or printing the record, if it is stored in electronic form, to a maximum of the first 20 pages, excluding the printing of photographs from photographs stored in electronic form.

8. Packaging of the photocopied or printed copy of the record for shipping or faxing.

9. If the record is stored in electronic form, electronically transmitting a copy of the electronic record instead of printing a copy of the record and shipping or faxing the printed copy.

10. The cost of faxing a copy of the record to a fax number in Ontario or mailing a copy of the record by ordinary mail to an address in Canada.

11. Supervising the individual’s examination of the original record for not more than 15 minutes.

(2) In addition to the fee charged under subsection (1), fees for the services set out in Column 1 of Table 1[7] shall not, for the purposes of subsection 54(11) of PHIPA, exceed the amounts set out opposite the service in Column 2 of the Table.

Application of the 2006 framework and the $30 set fee

[18] In applying the 2006 framework, a custodian must first consider the set fee of $30 set out in section 25.1(1) of the 2006 framework. Included in the $30 charge are fees for several listed administrative tasks involved in processing the request, such as the first 15 minutes of review by the custodian to determine if the record contains personal health information to which access may be refused, and photocopying or printing of the first 20 pages of the responsive records. It also includes costs incurred for packaging the photocopied or printed copy of the record for shipping and for mailing a copy of the record by ordinary mail to an address in Canada.

[19] Section 25.1(2) of the 2006 framework references Table 1 which, as previously indicated, sets out fees that a custodian is permitted to charge, over and above the set $30 fee, for several defined tasks. These include fees for making the records available to the requester on various mediums and fees for review.

Reasonable cost recovery for photocopying the records

[20] As set out in the 2006 framework, the fee for photocopying the first 20 pages of the complainant’s records of personal health information is accounted for in the $30 set fee. Under Item 1 of Table 1 of the 2006 framework, the custodian is permitted to charge $0.25 per page for photocopying beyond those first 20 pages.

Analysis and findings

[21] I do not uphold the pharmacy’s fee of $150. I find that the total fee should be $30.

[22] As noted above, previous IPC orders/decisions have held that the 2006 framework provides the best method for determining the amount of “reasonable cost recovery” under the Act. The 2006 framework allows custodians to charge a set fee of $30 for various administrative tasks involved in processing requests. This includes locating and retrieving the records and preparing a response and/or the records. As a result, any administrative tasks that are set out in the 2006 framework are to be included in the set fee of $30 and not added as additional costs.

[23] The pharmacy is charging the complainant $150 for three pages of records. These three pages fall within the first 20 pages set out in the $30 set fee and no additional fees regarding making and/or providing copies of the records should apply.

[24] The pharmacy has not provided me with any details about the nature of the three pages of records. Accordingly, I have no evidence before me that the requested records require anything more than a straightforward review beyond the initial 15 minutes.

[25] Based on the above and the 2006 framework, I find that the pharmacy’s fee exceeds the amount of reasonable cost recovery under the Act and that the total fee should be $30. I will order the pharmacy to provide the complainant with a refund of $120.[8]

ORDER:

For the foregoing reasons, pursuant to section 61(1) of the Act:

  1. I do not uphold the pharmacy’s fee of $150 and find it should be $30.
  2. I order the pharmacy to provide the complainant (through their representative) with a refund for $120 by October 10, 2025.
  3. To verify compliance, the pharmacy shall provide me with documentation by email to confirm that the refund has been issued to the complainant by October 10, 2025.

Original Signed by:

 

September 26, 2025

Michael Cusato

 

 

Case Lead

 

 


 

APPENDIX

TABLE 1

ITEM

COLUMN 1

COLUMN 2

1.

For making and providing photocopies or computer printouts of a record

25 cents for each page after the first 20 pages

2.

For making and providing a paper copy of a record from microfilm or microfiche

50 cents per page

3.

For making and providing a floppy disk or a compact disk containing a copy of a record stored in electronic form

$10

4.

For making and providing a microfiche copy of a record stored on microfiche

50 cents per sheet

5.

For making an providing a copy of a microfilm of a record stored on microfilm that is,

 

 

i. 16mm

$25 per reel

 

ii. 35mm

$32 per reel

6.

For printing a photograph from a negative or from a photograph stored in electronic form, per print,

 

 

i. measuring 4” × 5”

$10

 

ii. measuring 5” × 7”

$13

 

iii. measuring 8” × 10”

$19

 

iv. measuring 11” × 20”

$26

7.

For making and providing a copy of a 35mm slide

$2

8.

For making and providing a copy of an audio cassette

$5

9.

For making ad providing a copy of a ¼”, ½”, or 8mm video cassette,

 

 

i. that is one hour or less in length

$20

 

ii. that is more than one hour but not more than two hours in length

$25

10.

For making and providing a copy of a ¾” video cassette,

 

 

i. that is not more than 30 minutes in length

$18

 

ii. that is more than 30 minutes in length

$23

11.

For producing a record stored on medical film, including x-ray, CT and MRI films

$5 per film

12.

For the review by a health information custodian or an agent of the custodian of the contents of a record to determine if the record contains personal health information to which access or disclosure may or shall be refused

$45 for every 15 minutes after the first 15 minutes

13.

For supervising examination of original records

$6.75 for every 15 minutes

 



[1] The total fee was $169.50 inclusive of HST.

[2] Personal health information is defined as identifying information about an individual if the information relates to physical or mental health of the individual or to the providing of health care to the individual under sections 4(1)(a) and (b) of the Act.

[3] Health information custodian is defined as a person who operates a pharmacy within the meaning of the Drug and Pharmacies Regulation Act.

[4] As of the date of this decision, there is no PHIPA regulation that prescribes fees for access.

[5] Orders HO-009, HO-014 and PHIPA Decision 17.

[6] Notice of Proposed Regulation under PHIPA, published in Ontario Gazette Vol 139-10 (11 March 2006).

[7] See the appendix at the end of this decision.

[8] An adjustment for HST may be required.

 You are being directed to the most recent version of the statute which may not be the version considered at the time of the judgment.