Governance, risk & compliance

Alberta Protection of Privacy Act / Access to Information Act 2025

Alberta's public sector privacy and access law.

On 11 June 2025 the Freedom of Information and Protection of Privacy Act was repealed and replaced by two statutes: the Protection of Privacy Act (POPA) and the Access to Information Act (ATIA). Both apply to municipalities and municipal police services, along with school boards, post-secondary institutions, and provincial bodies.

POPA is more demanding than the FOIP privacy provisions it replaced: section 25 requires a documented privacy management program with a designated privacy officer, a security classification system, mandatory employee training, and a review cycle. Privacy impact assessments are required before new or substantially changed programs that collect personal information.

Breach notification follows the real risk of significant harm test. If your policy set still says FOIP, it is describing a repealed statute.

How Lavawall® helps you get to Alberta Protection of Privacy Act / Access to Information Act compliance

Most of Alberta Protection of Privacy Act / Access to Information Act comes down to technical controls you have to run and prove: keeping systems patched, hardening configuration, detecting breaches early, backing up what matters, controlling access, and keeping evidence that all of it actually happened. Lavawall® runs those controls across Windows, macOS, Linux, and Microsoft 365 / Google Workspace from one console, maps them to Alberta Protection of Privacy Act / Access to Information Act, and tracks your posture continuously instead of once a year at audit time.

• Assess your current state against Alberta Protection of Privacy Act / Access to Information Act in the Lavawall GRC module, with the questionnaire and control set built in.
• Remediate the gaps with the same platform — automated patching, configuration fixes, backups, and access review — not a separate project.
• Evidence everything with timestamped, exportable records auditors, insurers, and clients accept.

Related

Lavawall® supports Alberta Protection of Privacy Act / Access to Information Act as part of a built-in catalogue of compliance frameworks. Framework requirements are summarized for planning purposes; always confirm the current official text before certifying.