Alberta government proposes new privacy law to safeguard personal information

The Alberta government seeks to overhaul privacy and access laws for the public sector,introducing legislation thatministers saywill create the strongest privacy protections in Canada.

A second bill tabledWednesday, if passed, would also shield the government from providing public access to communication between political staff a change that one access to information expertsays is worrisome.

"I want you to have confidence that your personal information is protected at all times and is secured from unauthorized access," Technology and Innovation Minister Nate Glubish said during an embargoednews conference Wednesday morning.

Albertahas made no meaningful update toprivacy legislation in 20 years, Glubish said. The changes would ensure citizens are notified when their privacy is breached and would barpublic bodies from selling data.

The proposed legislation is the result of a 2019 call to action from privacy commissioners across Canada, he said. At the time, they urged provinces and territories to reform laws so they keep pacewith technology, such as social media, artificial intelligence and smart phones.

If passed, Bill 33, the Protection of Privacy Act, would also increase the penalties individuals and organizations would pay for breaches.

"Do you care about protecting Albertans, or do you care about protecting government?" Glubish said, when asked about higher penalties. "Protecting Albertans is the most important thing."

Common types of breaches include cases where an employee wrongly snoops on the records of someone they know, orreturning rented scanning or computer equipment without properly deleting the data, said Gary Dickson, a former Alberta Liberal MLA for Calgary-Buffalo and Saskatchewan's first information and privacy commissioner.

Larger fines for breaches are "symbolic," Dickson told CBC News, and penalties levied are rarely close to the maximum amounts.

Existing legislation does not require public bodies to report breachesto the minister, so in the last five years, no breaches resultedin fines, Jonathan Gauthier, Glubish's press secretary, told CBC News inan email.

The provincialgovernment plans to launch a website where Albertans can see when their information has been accessed, starting with digital child-care services, vehicle registrations and drivers' licence renewals,Glubish said.

The proposed legislation would also allow public bodies to de-personalize datasets, so the information could be used forresearch or making policy.

The Protection of Privacy Act would not apply to medical records or information in the possession of private companies. Although,Glubish said he's reviewing the legislation governing those records and will propose amendments next year.

Under the new privacy law, public bodies would have toperform privacy impact assessments in some scenarios. The government hasn't yet specified when.

Alberta's proposed law appears to go further than laws in other provinces, andwouldlikely afford citizens more protection, Dickson said. But such assessments could be onerousand require a lot of staff training.

Access to information law could be tightened

The provincial government is also trying to overhaul the law that gives citizens access to some government records.

It intends to split the existing Freedom of Information and Protection of Privacy Act (FOIP) into two new laws, including a new Access to Information Act that would be created by Bill 34.

If passed, the legislation would expand the definition of cabinet confidentiality,so messages between cabinet ministers' political staff, or just political staffers, would be exempt from disclosure unless it includes an employee of a public body.

"FOIP is about access to government records, not access to political conversations," Minister of Service Alberta and Red Tape Reduction Dale Nally said during Wednesday's news conference.

Opposition NDP justice critic Irfan Sabirtold CBC News the proposed law would be a departure from the previous NDPgovernment, calling the proposed amendmentself-serving.

"Government should not do politics on government time," Sabir said.

Nally said the change "allows government to focus on good governance" and aligns with a Supreme Court decision about cabinet confidentiality.The law would also allow the government to proactively disclose some records to stave off access to information requests.

The government has not yet said what kind of information would be proactively disclosed.

The bill proposes giving public bodies 30 business days to respond to an access request, which is longer than the30 calendar days in the current law. A public body could also delay responding to a request during a disaster or emergency.

The office of the information and privacy commissioner could also disregard access to information requests in some cases.

Sean Holman, a journalism professor at the University of Victoria in B.C.,who has expertise in access to information, findsparts of Bill 34"troubling," because it would shield anything discussed at a political level from the public eye.

"We do want to know how the sausage is being made," Holman said. "This expands the zone of secrecy that already exists in this area to, basically, any conversation involving cabinet members and political staff."

The proposed legislation would further restrict public knowledgeofhow government makes policy decisions and why,Holman said.

"That's the opposite of democracy," he said.