How to Make an Access Request in Alberta

You have Rights to Access! Here’s how to do it.

As of June 11, 2025, the province of Alberta enacted two new laws replacing the former Freedom of Information and Protection of Privacy Act (FOIP Act). The new statutes are the Access to Information Act (ATIA) and the Protection of Privacy Act (POPA).

Together, these two Acts signify a shift in Alberta’s access and privacy regime — splitting access and privacy into distinct frameworks, and reflecting the digital realities of record-keeping, data analytics and information management in the public sector.

ATIA

Under ATIA, public‐sector bodies in Alberta must handle access to records in the custody or control of those bodies — including individuals’ own personal information — subject to specified exceptions.

POPA

POPA establishes modernized and enhanced protections around how public bodies collect, use, disclose and manage personal information, including rules on automated decision-making, data linking (“data matching”), privacy management programs, and stricter penalties for privacy breaches.

HIA

Your access rights under the Health Information Act (HIA) reach as far as requesting your own health and/or demographic information stored by a health custodian.

OPEN DISCLOSURE

It is important for the applicant to check first if the information they are requesting is access to is already part of an open or routine disclosure scenario. If you need to use Alberta’s access laws to obtain the information you are seeking, you will need to make a formal request as the Office of the Information and Privacy Commissioner (OIPC) has no authority to review a response of failure to respond to an informal request, which is a request made outside of the Act.

WITHHELD INFORMATION

There is some information that organizations can refuse to provide, such as information collected for a legal proceeding or confidential commercial information. The Acts also have rules around the exclusion of records that are created by or for or in the custody or under the control of an officer of the legislature and related to the exercises of that officer’s functions.

PUBLIC BODIES INCLUDE

Government of Alberta departments, municipalities, Métis Settlements, school divisions, post-secondary institutions, police services (except RCMP), regional health authorities, housing and irrigation districts, public libraries, and certain boards, commissions, and agencies.

TO MAKE A FORMAL REQUEST

To request information under Alberta’s access and privacy laws, you must submit your request directly to the entity that holds the records:

  • Public bodies: Under the Access to Information Act (ATIA) or Protection of Privacy Act (POPA)

  • Health custodians: Under the Health Information Act (HIA)

  • Private organizations: Under the Personal Information Protection Act (PIPA)

Even though HIA allows verbal requests, it is strongly recommended to submit all requests in writing. Written requests provide a clear record, protect your rights, and are necessary if you later request a review by the Office of the Information and Privacy Commissioner (OIPC).

NO SURPRISE, THERE ARE FEES

  • Requests for general information may require an initial application fee (commonly $25 under ATIA).

  • After reviewing your request, the body may provide an estimate for retrieval or copying costs, which you can accept, reduce, or refine your request to lower costs.

  • You may request a fee waiver if payment would cause undue hardship or if release is in the public interest. If the fee waiver is denied, you may ask the OIPC to review that decision.

TIMELINE

  • Public bodies (ATIA/POPA) and health custodians (HIA): Generally have 30 days to respond. Extensions may be granted for complex requests.

  • Private organizations (PIPA): Generally have 45 days to respond, with possible extensions.

If a public body or organization fails to respond, refuses access improperly, or does not meet the timelines, you can submit a review or complaint to the OIPC. This ensures your rights are protected and allows the OIPC to intervene.

SUBMITTING A COMPLAINT

If you believe a public body, health custodian or private organization has not properly handled your access or correction request (for example, failed to respond in time, refused access without valid grounds, or charged unreasonable fees), you may request a review or file a complaint with the OIPC.

Time‑limits to apply for review/complaint:

  • For an access or correction decision by a public body or health custodian, you must submit your request for review within 60 days of being notified of the decision.

  • For a decision by a private‑sector organization (under PIPA), you must submit your request for review within 30 days of being notified of their decision.

  • If your concern is that additional records exist (an “adequate search concern”), effective April 1, 2024 you must first raise the concern with the entity itself in writing and allow at least 30 working days for their response before applying to the OIPC.