Privacy Impact Assessments

The OIPC is undertaking a review of its resources. If there is a resource from the previous website that is no longer available, please contact the office.

• ABTraceTogether Privacy Impact Assessment Review Report
  

  The OIPC released a report on its review of the ABTraceTogether contact-tracing application privacy impact assessment (PIA), given the global attention focused on contact-tracing apps during the COVID-19 pandemic. The PIA was submitted by Alberta Health, and endorsed by Alberta Health Services. The OIPC accepted the PIA, with recommendations.

• Bill 28: Public Health Amendment Act, 2016
  

  On November 9, 2016, the Commissioner wrote to the Minister of Health seeking clarification on certain provisions of Bill 28 - the Public Health Amendment Act, 2016.

• Guidance for Electronic Health Record Systems (PDF)
  

  This guide was developed to assess the safeguards in electronic health record (EHR) systems. Custodians and their EHR service providers may use this document to support a Privacy Impact Assessment on an EHR system, or to examine whether changes to a system comply with Health Information Act requirements. Published in June 2016.

• Guidance for Electronic Health Record Systems (Word)
  

  This guide was developed to assess the safeguards in electronic health record (EHR) systems. Custodians and their EHR service providers may use this document to support a Privacy Impact Assessment on an EHR system, or to examine whether changes to a system comply with Health Information Act requirements. This is an editable version of the guide. Published in June 2016.

• Netcare Expedited PIA Process
  

  This document outlines the process the OIPC adopted on August 1, 2014 for accepting Privacy Impact Assessments for Alberta Netcare, the province's electronic health record. This followed the release of a new guide issued by Alberta Health in January 2014. Published in August 2014, contact information within the document was updated in July 2016.

• Privacy Impact Assessment Requirements
  

  This guide is meant to assist public bodies, health custodians and organizations in drafting PIAs for projects that hat have privacy risks. Please note that all mention of legislation in this guide refers to the Health Information Act as there is a legislated duty to prepare privacy impact assessments (section 64 of HIA). Published in 2010.