Access and Privacy Office
The Government of Alberta has updated Alberta’s public-sector access to information and privacy legislation by repealing the Freedom of Information and Protection of Privacy Act (FOIP) and replacing it with two new pieces of legislation. These changes took effect on June 11, 2025. The new legislation separates access to information and privacy into two distinct frameworks:
Compliance with ATIA and POPA
For the purposes of both the the Access to Information Act (ATIA) and Protection of Privacy Act (POPA), the Board of Governors has designated the General Counsel and Vice-President (People and Culture) as the "Head" of the University of Calgary. The Head is accountable for all decisions made under the acts.
Under the authority of the Head, the day-to-day administration and implementation of the requirements of ATIA and POPA are delegated to the Access and Privacy Office. In accordance with the applicable provisions of ATIA and POPA, the Head has further delegated specific duties, powers, and functions as outlined in the University of Calgary's Privacy Policy and Delegation of Authority Policy.
Cybersecurity, Privacy Awareness & Research Security courses
Required training for UCalgary faculty and staff
What we do
Hover over each component below to learn more.
Health Information Act (HIA)
Physicians who bill Alberta Health Care for the provision of a health service are considered custodians under the HIA and they are personally responsible for managing patient files in accordance with the provisions of the act. However, when a physician operates under the auspices of the University or a University clinic and stores health information on University systems, the University assumes responsibility for creating and maintaining a secure operating environment.