Alberta proposes stronger privacy protections with new legislation

In response to the message from Albertans about the importance of privacy, the Alberta government is taking steps to enhance privacy and protections. Earlier this year, the government introduced the Alberta Privacy Management Framework and Data Ethics Framework, which emphasize “privacy by design” principles. These principles prioritize the protection of personal information in business decisions.

To further these efforts, the government has proposed amendments to the Freedom of Information and Protection of Privacy (FOIP) Act. The proposal includes diving the FOIP Act into two separate acts: one focused on access to information, and the other on privacy. This separation aims to ensure that both areas receive the dedicated attention they deserve.

The new Protection of Privacy Act is designed to update Alberta’s privacy legislation for the digital age. It aims to strengthen the rules governing the protection of personal information held by public bodies, provide tools to inform and reassure Albertans about privacy practices, enhance regulatory functions, and improve accountability and compliance.

Minister of Technology and Innovation, Nate Glubish, emphasized the importance of these changes, stating, “Albertans should have the strongest privacy protections in Canada. This legislation would deliver exactly that. The privacy of Albertans is non-negotiable. And come hell or high water, I’m here to protect it.”

If passed, the Protection of Privacy Act would build on existing privacy laws by requiring public bodies to pay more attention to how they manage personal information. It would introduce new requirements related to data management and mandate that public bodies consider privacy implications when developing or modifying programs, services, and systems.

The legislation seeks to implement global best practices, such as requiring privacy management programs and privacy impact assessments. These tools help ensure that public bodies develop, deliver, and manage their programs and services in a way that respects and protects personal information.