Alberta PIPA
Alberta PIPA is Alberta’s private-sector privacy law, which regulates how provincial organizations handle personal information and was the first Canadian law to require mandatory breach notification.
Alberta’s Personal Information Protection Act (PIPA) governs the collection, use, and disclosure of personal information by private-sector organizations in the province and, like BC’s law, is recognized as substantially similar to PIPEDA.
Alberta was notably the first Canadian jurisdiction to require organizations to notify the Commissioner of a breach involving a real risk of significant harm — a model later echoed federally. It also covers employee personal information for provincially regulated employers.
Enforcement rests with the Office of the Information and Privacy Commissioner of Alberta, which can order organizations to comply.
