Çï¿ûÊÓÆµ

Privacy Management Program

Overview

The Government of Alberta has updated Alberta’s public-sector access to information and privacy legislation by repealing the Freedom of Information and Protection of Privacy Act (FOIP) and replacing it with two new pieces of legislation. These changes took effect on June 11, 2025. The new legislation separates access to information and privacy into two distinct frameworks: the Access to Information Act (ATIA) and the Protection of Privacy Act (POPA)

Under POPA, all Alberta public bodies—including UCalgary—are required to establish and maintain a comprehensive Privacy Management Program (PMP). UCalgary’s PMP is an institution‑wide framework designed to ensure that UCalgary is prepared to meet its legal responsibilities under POPA, including protecting privacy, providing appropriate access to personal information, and supporting accountability, transparency, and fairness. It outlines the documented policies, procedures and standards that guide how personal information may be managed across all faculties, departments, and administrative units, and reflects UCalgary’s commitment to protecting personal privacy and maintaining public trust.

Oversight of the PMP is provided by the Office of General Counsel, which publishes the PMP and supports its implementation across campus. While the Access and Privacy office provides guidance and expertise, privacy is a shared responsibility. Every member of the UCalgary community plays an integral role in protecting personal information and upholding the principles of POPA. Through this coordinated approach, UCalgary will maintain a modern, transparent, and accountable privacy environment that supports teaching, research, and administrative excellence. 

Additional Resources

Privacy Impact Assessments (PIA)

PIAs are a tool used to identify and mitigate privacy risks relating to the collection, use, or disclosure of personal information and ensure institutional activities comply with POPA.

Privacy Incident/Breach and Complaint Process

Outlines how privacy concerns, incidents, and breaches are reported, assessed, and managed at UCalgary. 

UCalgary Notice of Collection

Outlines how UCalgary collects, uses, discloses and protects the personal information of students, staff, and community members.

Data Matching and the Creation of Non-Personal Data

Establishes requirements for data-matching and outlines a data quality assurance process for the creation, use and disclosure of de-identified or anonymized non-personal data.

Cybersecurity, Privacy Awareness & Research Security Training

Training to ensure that UCalgary is safeguarding our institution from cyberthreats, protecting personal information, and ensuring the security of our research assets. 

Use of AI and Automated Systems

Learn how to use AI and automated systems responsibly at UCalgary.