Alberta has implemented what it calls Canada’s strongest privacy protection legislation, with new rules taking effect June 11 that impose the strictest penalties for privacy violations in the country.
The Protection of Privacy Act, passed in December 2024, requires public bodies to build privacy protections into programs and services from the ground up. The legislation mandates that all Alberta public bodies adopt privacy management programs meeting specific standards by spring 2026.
“Albertans have told us that their privacy is important. We listened and took action. We brought in the strongest public sector privacy protections and the strictest penalties in Canada,” said Nate Glubish, Minister of Technology and Innovation.
The new law establishes detailed requirements for how public bodies handle personal information, with accompanying regulations setting practical expectations for privacy protection and accountability measures.
Streamlined information sharing during emergencies
The legislation includes provisions allowing public bodies to share information more efficiently when providing integrated services. During emergencies, this could enable faster assessment of Albertans’ eligibility for various government supports across different agencies.
The act also updates collection notice requirements, clarifying that Albertans can contact public bodies by email rather than only by mail or phone. Collection notices will not need repetition when gathering information from the same person for the same purpose.
Compliance support and transparency measures
Alberta has launched a dedicated website showing which items will be affected by the privacy law changes. The province provides resources on Alberta.ca to help public bodies comply, including online training, information sheets and templates.
The legislation requires regular reviews of the act to ensure it keeps pace with technological developments and privacy best practices.
Public bodies across Alberta now must demonstrate they are designing programs and services with privacy protection as a foundational element, rather than an afterthought.
