Strengthening the protection of personal information

The Protection of Privacy Act, 2024 protects personal information and implements the strongest privacy safeguards in Canada.

Status: The Protection of Privacy Act received royal assent on December 5, 2024 and will come into force in the Spring of 2025.
Ministry responsible: Minister of Technology and Innovation.

Overview

Alberta’s Freedom of Information and Privacy Act (FOIP) needs modernization. Without a significant update since the early 2000’s, the FOIP Act does not offer privacy protections needed in the digital world. 

The Protection of Privacy Act, 2024 aims to give Albertans peace of mind their personal information is protected. This will make it mandatory for public bodies to create their programs and services with protection of privacy in mind. It will also streamline processes and require that Albertans are notified if their personal information is involved in a privacy breach.

Albertans value their privacy and the protection of personal information. As they rely more and more on technology in their day-to-day lives, Alberta’s government is looking at how its legislation should continue to protect Albertans’ privacy and reflect the new realities of an age of rapidly changing technology. 

Learn more:

Minister Nate Glubish announcement

Key changes

The Protection of Privacy Act:

  • enhances privacy protections by ensuring public bodies are properly managing and protecting personal information
  • enforces the strictest penalties in Canada for the misuse of Albertans’ personal information
  • streamlines processes, like recognizing legislated timelines should not count days on which public bodies are not open and making it easier to appoint independent adjudicators
  • allows the Office of the Information and Privacy Commissioner (OIPC) not to proceed with an investigation unless an applicant wants them to or OIPC deems it as unnecessary
  • requires 6-year reviews of the legislation to ensure it remains current
  • implements requirements for privacy management programs, privacy impact assessment and privacy breach reporting
  • makes it mandatory for Albertans to be notified if their personal information is involved in a privacy breach

Next steps

Stakeholder engagements and consultations with public bodies were held in January and February 2025 to receive feedback on the Act.

The Protection of Privacy Act and associated regulations will come into force in Spring 2025.