Privacy Management Program
Overview
The Government of Alberta has updated Alberta鈥檚 public-sector access to information and privacy legislation by repealing the Freedom of Information and Protection of Privacy Act (FOIP) and replacing it with two new pieces of legislation. These changes took effect on June 11, 2025. The new legislation separates access to information and privacy into two distinct frameworks: the Access to Information Act (ATIA) and the Protection of Privacy Act (POPA).
Under POPA, all Alberta public bodies鈥攊ncluding U91探花鈥攁re required to establish and maintain a comprehensive Privacy Management Program (PMP). U91探花鈥檚 PMP is an institution鈥憌ide framework designed to ensure that U91探花 is prepared to meet its legal responsibilities under POPA, including protecting privacy, providing appropriate access to personal information, and supporting accountability, transparency, and fairness. It outlines the documented policies, procedures and standards that guide how personal information may be managed across all faculties, departments, and administrative units, and reflects U91探花鈥檚 commitment to protecting personal privacy and maintaining public trust.
Oversight of the PMP is provided by the Office of General Counsel, which publishes the PMP and supports its implementation across campus. While the Access and Privacy office provides guidance and expertise, privacy is a shared responsibility. Every member of the U91探花 community plays an integral role in protecting personal information and upholding the principles of POPA. Through this coordinated approach, U91探花 will maintain a modern, transparent, and accountable privacy environment that supports teaching, research, and administrative excellence.
Additional Resources
Privacy Impact Assessments (PIA)
PIAs are a tool used to identify and mitigate privacy risks relating to the collection, use, or disclosure of personal information and ensure institutional activities comply with POPA.
Privacy Incident/Breach and Complaint Process
Outlines how privacy concerns, incidents, and breaches are reported, assessed, and managed at U91探花.
U91探花 Notice of Collection
Outlines how U91探花 collects, uses, discloses and protects the personal information of students, staff, and community members.
Data Matching and the Creation of Non-Personal Data
Establishes requirements for data-matching and outlines a data quality assurance process for the creation, use and disclosure of de-identified or anonymized non-personal data.
Cybersecurity, Privacy Awareness & Research Security Training
Training to ensure that U91探花 is safeguarding our institution from cyberthreats, protecting personal information, and ensuring the security of our research assets.
Use of AI and Automated Systems
Learn how to use AI and automated systems responsibly at U91探花.