Collection of personal information

Overview

Public bodies may only collect personal information in specific circumstances that are prescribed in the Protection of Privacy Act (POPA) and the manner of collecting the personal information.

Collection

Personal information may only be collected by or for a public body under certain circumstances which includes the:

• collection of information must be expressly authorized by an enactment of Alberta or Canada
• information is collected for the purposes of law enforcement
• information relates directly to and is necessary for an operating program or activity of the public body, including a common or integrated program or service

Collection with notice

When collecting personal information directly from an individual, POPA requires public bodies to notify the individual of the:

• purpose for the collection of personal information
• legal authority for the collection
• contact information (email address, telephone number or other contact information) the individual may submit questions they have about the collection
• the public body’s intent to use an automated system to generate content or make decisions, recommendations, or predictions using the collected information
• if applicable, the public body’s intent to use an automated system to generate content or make decisions, recommendations, or predictions using the collected information

Refer to POPA resources for more information on collection notices. 

Direct and indirect collection

POPA permits the collection of personal information, but it must be collected directly from the individual unless an exception applies. If an exception applies, then personal information may be collected indirectly.

Indirect collection occurs when information is obtained from someone other than the individual the information is about.

For instances when a public body is authorized to collect personal information indirectly, refer to the Protection of Privacy Act. 

Disclaimer

All persons reviewing Technology and Innovation’s Protection of Privacy Act site are reminded that it has no legislative sanction and has been provided for guidance and convenience of reference only. The official Statutes and Regulations should be consulted for all purposes of interpreting and applying the law.