I am not sure what province you are in as some provinces you would file a complaint with that office and not under PIPEDA. https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/02_05_d_15/
My experience with GWL is that they disclosed my spouses claim file within the 30 days (4 months is too long) but when we reviewed the claim file we would have to request pages that were missing. We could identify the missing pages as there would be a reference to an email exchange between his employer or a conversation that was missing. Sometimes it would say page 1 of 7–but we would only receive 3 pages–so they would send when we asked or refuse and claim commercial information.
When you request they are suppose to list any documents that they are refusing to release and the reason why. This did not happen for us.
They are also suppose to give the name of who to file a complaint to. This was not done either.
If you are approaching the COD date they will be reviewing your claim, likely 6-9 months before the COD.
You will be asked to provide your work history and education and typically requested to apply for CPP-D.
Your insurer or case manager likely has done a social media/google search on you but nothing worth documenting.
You will know if you have been or about to be under surveillance if you receive an activity form to fill out.
Just don’t write anything on the pages and keep the envelope it came in.