Alberta. Health data. Act
Alberta HIAHealth Information Act (RSA 2000, c. H-5)
Partly verified
Medium confidence.Not declared substantially similar to PIPEDA (PIPEDA may still apply to commercial activity).
§1Summary
- Synopsis
Protects health information held by Alberta custodians (health ministries, Alberta Health Services successors, pharmacies, regulated health professionals) and their affiliates while enabling sharing for care and system management, including Netcare EHR.
- Key themes
- Unique features
Requires custodians to notify the Commissioner, the Minister and individuals of breaches; affiliates (including information managers) bound by custodian's privacy programme; amended by Health Statutes Amendment Act, 2025 (No. 2) effective 2026-06-22 / 2026-07-02.
- SaaS relevance
Health SaaS vendors acting as agents, electronic service providers or information managers for custodians in this province must meet the Act's security, contract and breach obligations.
§2Obligations
- Extraterritorial
- No
- Breach notification
- Commissioner, Minister and individuals where risk of harm
- DPO
- Yes
- Maximum penalty
- Offence fines (amounts not verified)
§3Dates
- Key dates
- Adopted
- In force
§4Text and authority
- Text
- Authoritative text oipc.ab.ca
- Authority
- Office of the Information and Privacy Commissioner of Alberta (OIPC)
§5Where it applies
- Domestic law of
- Alberta
§6Sources and verification
- Sources consulted
- Verification
Medium confidence.
Partly verified
Medium confidence.Not declared substantially similar to PIPEDA (PIPEDA may still apply to commercial activity).