314 (1) A service provider that receives a request from an individual for access to a record of personal information shall, (a) make the record available to the individual for examination and, at the request of the individual, provide a copy of the record to the individual and if reasonably practical, an explanation of the purpose and nature of the record and any term, code or abbreviation used in the record; (b) give a written notice to the individual stating that, after a reasonable search, the service provider has concluded that the record does not exist, cannot be found, or is not a record to which this Part applies; (c) if the service provider refuses the request, in whole or in part, under any provision of this Part other than clause 312 (1) (c) or (d), give a written notice to the individual stating that the service provider is refusing the request, in whole or in part, providing a reason for the refusal and stating that the individual is entitled to make a complaint about the refusal to the Commissioner under section 316; or (d) subject to subsection (2), if the service provider refuses the request, in whole or in part, under clause 312 (1) (c) or (d), give a written notice to the individual stating that the individual is entitled to make a complaint about the refusal to the Commissioner under section 316 and that the service provider is refusing, (i) the request, in whole or in part, while citing which of clauses 312 (1) (c) and (d) apply, (ii) the request, in whole or in part, under one or both of clauses 312 (1) (c) and (d), while not citing which of those provisions apply, or (iii) to confirm or deny the existence of any record subject to clauses 312 (1) (c) and (d). Exception (2) A service provider shall not act under subclause (1) (d) (i) where doing so would reasonably be expected in the circumstances known to the person making the decision on behalf of the service provider to reveal to the individual, directly or indirectly, information to which the individual does not have a right of access. Time for response (3) As soon as possible, but no later than 30 days after receiving the request, the service provider shall, by written notice to the individual, give the response required by subsection (1) or extend the deadline for responding by not more than 90 days if, (a) responding to the request within 30 days would unreasonably interfere with the operations of the service provider because the information consists of numerous pieces of information or locating the information would necessitate a lengthy search; or (b) the time required to undertake an assessment under subsection 312 (1) necessary to respond to the request within 30 days after receiving it would make it not reasonably practical to respond within that time. Extension of time — notice and response (4) A service provider that extends the time limit under subsection (3) shall, (a) give the individual written notice of the extension setting out the length of the extension and the reason for it; and (b) respond as required by subsection (1) as soon as possible but no later than the expiry of the time limit as extended. Expedited access (5) Despite subsections (3) and (4), if the individual provides the service provider with evidence satisfactory to the service provider that the individual requires access to the requested record of personal information within a specified time period, the service provider shall respond within that time period if the service provider is reasonably able to do so. Frivolous or vexatious requests (6) A service provider that believes on reasonable grounds that a request for access to a record of personal information is frivolous or vexatious or is made in bad faith may refuse to grant the individual access to the requested record and, in that case, shall provide the individual with a notice that sets out the reasons for the refusal and that states that the individual is entitled to make a complaint about the refusal to the Commissioner under section 316. Deemed refusal (7) A service provider that does not respond to a request for access within the time required is deemed to have refused the request. Right to complain (8) If the service provider refuses or is deemed to have refused the request, in whole or in part, (a) the individual is entitled to make a complaint about the refusal to the Commissioner under section 316; and (b) in the complaint, the burden of proof in respect of the refusal lies on the service provider. Identity of individual (9) A service provider shall not make a record of personal information or a part of it available to an individual or provide a copy of it to an individual under clause (1) (a) without first taking reasonable steps to be satisfied as to the individual’s identity. No fee for access (10) A service provider shall not charge a fee for providing access to a record under this section, except in the prescribed circumstances. Corrections to Records Correction to record