• Provides a general overview of Alberta’s Personal Information Protection Act (PIPA), which sets out the ground rules for how private-sector organizations may collect, use or disclose information about individuals.

• A brief outline of what the Act means for organizations.

• A four-page summary of the key obligations of organizations set out in the Act.

• Outlines steps organizations should consider following to comply with the Act. See also PIPA Pointers.

• A guide to help organizations understand the Act and their obligations.

• Explains the concept of a personal information code under section 55 of the Act, discusses the advantages and disadvantages of establishing a code for a professional regulatory organization, and provides suggestions for developing a code, including sample provisions.

• Describes how the Act applies to non-profit organizations in Alberta.

• Explains how the Act applies to the collection, use and disclosure of personal information without consent for investigations and related activities. Also describes how the Act applies to a request by an individual to access records containing personal information collected for an investigation.

• Discusses what constitutes personal information about an identifiable individual for the purposes of PIPA, examines how business contact information and personal employee information are treated, and reviews the differences between personal information and the information about a business, particularly in the context of an access request.

• Explains how the Act applies to personal information collected by businesses and organizations before January 1, 2004.

• Explains what personal employee information is, the circumstances in which an organization may collect, use or disclose personal employee information without consent, the obligations of the employer to provide access to and to correct personal employee information, the duty of the employer to safeguard the information, and how long an employer may retain the information. Also discusses business contact information.

• Explains amendments to the Act that came into force on June 2, 2005.

• Provides guidance on how PIPA applies to organizations with respect to the personal information of deceased individuals, as well as who may exercise the rights of a deceased individual, including the right to make an access request. Considers two special categories of personal information about deceased individuals : personal information needed for arranging a funeral and personal information of deceased employees.

• Examines the way PIPA attempts to balance the protection of personal information and the interest in preserving personal information that has been collected or created by organizations, and making it available for archival and research purposes.

• Explains what personal information is "publicly available" for the purposes of PIPA and the circumstances in which an organization may collect, use or disclose this information without the consent of the individual the information is about.

• A guide on developing a privacy policy in accordance with the Act. Includes a sample policy that can be customized to reflect an organization's personal information protection policies and practices.

• Guidelines and forms to assist law enforcement agencies when requesting person information from organizations subject to PIPA or PIPEDA.

• Ten Steps to Implement PIPA
• Conducting a Privacy Audit
• Model Contract Language
• Privacy Compliance Assessment Survey
• Setting Up a Complaint-Handling Process
• What is a Privacy Officer?

Presentations

• Presentation on what businesses and non-profit organizations need to know about the Personal Information Protection Act, including key legislative requirements and available resources.