Privacy Map

Alberta. Sectoral privacy. Act

Alberta POPAProtection of Privacy Act (SA 2024, c. P-28.5)

In force
Partly verifiedMedium confidence. Brief row. Breach notification content from general knowledge of POPA; verify.

§1Summary

Synopsis

New public-sector privacy statute for Alberta public bodies. It mandates privacy management programmes and PIAs, regulates data matching and non-personal data, bans sale of personal information and requires disclosure of automated decision systems.

Key themes
  • public sector
  • privacy management programme
  • PIA
  • data matching
  • non-personal data
  • automated systems
  • ban on sale
Unique features

Expressly regulates creation and use of non-personal/derived data and requires notice when automated systems generate content or decisions.

SaaS relevance

Relevant for SaaS vendors selling to Alberta public bodies, which must run PIAs and flow privacy-programme requirements to suppliers.

§2Obligations

Extraterritorial
No
Breach notification
Commissioner, Minister and individuals where real risk of significant harm
Maximum penalty
Increased offence fines (amount not verified)

§3Dates

Key dates
  • Adopted
  • In force
  • Replaced FOIP privacy provisions alongside Access to Information Act (SA 2024, c. A-1.4); Bill 46 (2025) technical amendments assented 2025-05-15

§4Text and authority

Text
Authority
Office of the Information and Privacy Commissioner of Alberta (OIPC)

§5Where it applies

Domestic law of
Alberta

§6Sources and verification

Verification

Medium confidence.

Partly verifiedMedium confidence. Brief row. Breach notification content from general knowledge of POPA; verify.