Data, privacy and AI rules

Due in 60 days12Regulations190

12 due in 60 days · 190 regulations

Jurisdiction

Alberta, Canada: data, AI and cyber laws

Part of Americas.

Regulations

Add to calendar
Apple Calendar or OutlookGoogle Calendar Download .ics
In force
Alberta POPAReplaces the privacy part of Alberta's FOIP Act for public bodies. It adds mandatory breach notification where there is a real risk of significant harm, privacy management programs, privacy impact assessments, rules for creating and using non-personal data, and notice when personal information will be fed into automated systems. It also bans selling personal information and adds large offence fines.In effect since Jun 11, 2025

Past deadlines

ComplianceJun 11 · 5 months ago · Source
Privacy management programs requiredPublic bodies must establish and implement a privacy management program one year after the section comes into force (s. 25(5)).
Takes effectJun 11, 2025 · 17 months ago · Source
POPA in forceAct comes into force with the Access to Information Act, proclaimed in force June 11, 2025.