Codify — Article

Alberta’s Access to Information Act replaces FOIP with a new disclosure regime

Establishes a statutory right to records, detailed exemptions and timelines, and a strengthened Information and Privacy Commissioner with order-making and review powers.

The Brief

Bill 34 replaces Alberta’s Freedom of Information and Protection of Privacy Act with a single Access to Information Act that creates a statutory right to records held by provincial and designated local public bodies while enumerating new procedural rules, exemptions and enforcement tools. It standardizes request formality (written requests with specific detail), sets a 30-business-day response target, and creates processes for extensions, transfers, third‑party notice and continuing requests for up to two years.

The Act also recasts exemptions (business, personal privacy, law enforcement, cabinet/Treasury Board confidences, intergovernmental and local public body confidences, etc.), gives the Information and Privacy Commissioner expanded investigatory and order-making authority (orders are final and enforceable through the Court of King’s Bench), sets criminal and administrative penalties, and prescribes a regulatory and transitional framework. For compliance officers and legal teams, the Act shifts where release decisions, costs and dispute-resolution burdens fall and introduces several implementation details—time thresholds, notice periods and exemptions—that will determine practical access outcomes.

At a Glance

What It Does

Creates a statutory right of access to records in the custody or control of provincial and designated local public bodies, subject to specified exceptions and procedural requirements. It requires written requests with enough detail to locate records, a 30-business-day response obligation (with enumerated extensions), third-party notice and a public-interest disclosure duty for health/safety risks.

Who It Affects

Provincial departments and agencies, local public bodies (schools, health bodies, municipalities and certain boards), post‑secondary institutions, third parties who supply information to public bodies, the Office of the Information and Privacy Commissioner and employees with access to confidential records.

Why It Matters

The Act modernizes access and oversight, centralizes review and gives the Commissioner order-making power that is final unless judicially reviewed, creating faster enforcement pathways but also concentrating discretion. The combination of broad exceptions, multi-tier review mechanisms and detailed procedural rules will materially affect records-release decisions and compliance costs.

More articles like this one.

A weekly email with all the latest developments on this topic.

Unsubscribe anytime.

What This Bill Actually Does

The Act establishes a clear, written-route for anyone to request records from Alberta public bodies. Requests must be written, describe the records with enough specificity to locate them, and comply with any fees; the Act defines “business day” and permits an applicant to make a continuing request that remains in force for up to two years with a schedule of deemed receipt dates.

Heads of public bodies must make every reasonable effort to assist applicants, and the default response window is 30 business days after a valid request is received. Failure to meet that deadline is treated as a refusal.

Public bodies may extend response times for reasonable reasons—applicant consent, large volumes, consultations with third parties or other bodies, concurrent requests, or where third‑party interests require notice—and automatic extensions apply during declared emergencies and while third‑party reviews are pending. The Act allows heads to disregard abusive, repetitive or incomprehensible requests and to declare requests abandoned when applicants do not respond to information or fee requests within 30 business days.Division 2 sets out the exemptions: commercial and trade‑secret protections for third parties and the government, specific privacy protections (with detailed presumptions about what is an unreasonable invasion), law‑enforcement confidences, workplace and whistleblower protections, cabinet and Treasury Board confidences, and local public body deliberations.

Several exemptions are time‑conditioned—e.g., some cabinet, intergovernmental, audit and archival exclusions lapse after 15, 25 or 50 years—creating predictable release windows for older records. Third parties receive notice where disclosure may affect their interests and have defined windows (20 business days to make representations or consent) before a head decides.Oversight and remedies center on the Information and Privacy Commissioner, who is appointed as an officer of the Legislature.

Individuals and affected third parties can ask the Commissioner to review head decisions; the Commissioner may mediate, inquire, order remedies (including requiring disclosure) and has powers to compel production of records for review. Orders are final and may be filed with the Court of King’s Bench and enforced as court orders; judicial review is available but the Commissioner’s orders stand unless stayed by court action.

The Act also provides for designation of an independent adjudicator (a judge) to handle complaints or reviews where the Commissioner has a conflict, and it contains offence provisions (up to $50,000) for obstructive conduct and protections for employees who disclose to the Commissioner in good faith.

The Five Things You Need to Know

1

Responses to valid requests are due within 30 business days; failing to respond within that period is treated as a refusal and can be reviewed by the Commissioner.

2

A public body must notify third parties when requested records may affect their business interests or privacy; third parties have 20 business days to consent or make representations, and the head must decide within 30 business days (subject to extensions).

3

The Commissioner can order disclosure, require performance of duties, reduce time extensions and order fee refunds; Commissioner orders are final and may be filed in Court of King’s Bench and enforced as judgments.

4

Heads may disregard requests that are abusive, repetitive, incomprehensible or that unreasonably interfere with operations; requests may be declared abandoned if an applicant does not respond to requests for information or fees within 30 business days.

5

The Act creates criminal and administrative sanctions: up to $50,000 for destroying records to evade a request or obstructing the Commissioner, and up to $10,000 fines for adverse employment actions against employees who disclose to the Commissioner in good faith.

Section-by-Section Breakdown

Every bill we cover gets an analysis of its key sections. Expand all ↓

Sections 1–5

Definitions, purposes and scope — who and what the Act covers

▾

These opening provisions define core terms (public body, local public body, personal information, business day, biometric information, record) and set the Act’s purposes: access to records, access to one’s personal information, and independent review. Section 4 draws a detailed map of exclusions (courts, certain judicial and quality assurance records, health information under the Health Information Act, registries such as Land Titles and Vital Statistics, teaching and research material for post‑secondary staff, and more). Several exclusions are time‑limited (15, 25 or 50 years), which creates future-release pathways for archival material and audits and is a practical change for records management and access planning.

Sections 6–18

Request mechanics, timelines and operational duties

▾

This block sets the request procedure: written requests with sufficient detail, the head’s duty to assist, and options to examine or receive copies. It codifies a 30-business-day response window, conditions for time extensions, rules for transferring requests between public bodies and a specific rule that a section 7 request touching health information is treated as a Health Information Act request when made to a custodian. It also introduces continuing requests (applicant can have a granted request remain effective up to two years with a schedule of deemed receipt dates) and gives heads the power to disregard or declare requests abandoned where appropriate—practical levers to handle high-volume or abusive filings.

Division 2 (Sections 19–34)

Exemptions — the substantive limits on access

▾

The Act enumerates broad exemptions protecting third‑party commercial interests, personal privacy (with lists of presumption categories), law‑enforcement and prosecution records, confidential workplace and whistleblower materials, cabinet and Treasury Board deliberations, intergovernmental confidences, testing/audit methods and privileged lawyer‑client or parliamentary material. Many exemptions come with caveats (consent, statutory authorizations, time limits), and the head must consider prescribed factors when balancing privacy against public interest, so exemptions are not absolute but structured to guide decision‑making.

4 more sections▾
Sections 35–37

Third‑party notice and public‑interest disclosures

▾

When disclosure could harm a third party’s interests or invade privacy, heads must, where practicable, notify the third party, provide the relevant record portion and give 20 business days for consent or submissions. The head must then decide within 30 business days (subject to extensions). Separately, section 37 requires immediate disclosure without a request when information indicates a risk of significant harm to public health, safety or the environment, and it instructs heads to notify affected third parties and the Commissioner where practicable—an explicit public‑interest override of exemptions.

Part 2 (Sections 38–57)

Information and Privacy Commissioner — role, powers and office

▾

The Commissioner is an officer of the Legislature with a fixed term, budgetary mechanisms, and investigatory powers that include compelling records, examining information (including personal information) and obtaining sworn testimony under inquiry powers. The Commissioner can conduct audits, issue orders about compliance, give system‑level advice and engage in public education. There are strict confidentiality requirements for the Commissioner’s office and protections for staff; deliberate pathways exist for the Standing Committee to vary certain public‑service and compensation rules for the Office.

Part 3 (Sections 58–76)

Reviews, inquiries and orders — procedural remedies

▾

Requesters and notified third parties may seek Commissioner review of head decisions; the Commissioner may mediate or hold an inquiry (usually private) and must complete inquiries within 180 business days unless extended. The burden of proof generally lies with the head to justify refusals, with specific shifting rules where third‑party personal information is at issue. The Commissioner may order disclosure, confirm or remit decisions, require performance of duties, and set conditions; orders are final but subject to judicial review in Court of King’s Bench within specified windows, and they can be filed and enforced as court judgments.

Parts 4–5 (Sections 85–103)

Operational rules, enforcement, fees and transition

▾

These provisions cover notice methods, delegation, mandatory publication of decision‑making manuals, directory obligations, categories of records available without request, fee rules (fees limited to actual cost, with fee‑waiver discretion for indigence or public interest), offence provisions (including fines), regulation‑making powers, de‑designation/designation criteria for public‑body status, a mandatory six‑year statutory review cycle and transitional rules for handling existing requests and the repeal of the former FOIP Act.

Who Benefits and Who Bears the Cost

Every bill creates winners and losers. Here's who stands to gain and who bears the cost.

Who Benefits

  • Requesters and journalists — gain a streamlined, written request route, defined timelines, third‑party notice protections and an empowered Commissioner who can order disclosure and enforce compliance.
  • Public health and safety stakeholders — section 37 forces prompt public disclosure of risks to health, safety or the environment without waiting for a formal request, which can accelerate protective action.
  • Third parties and commercial suppliers — detailed business‑confidentiality exemptions and notice provisions give them opportunities to object to disclosure and to rely on time‑limited protections for sensitive commercial information.
  • Archivists and researchers — several exclusions lapse after fixed periods (15, 25, 50 years), creating predictable release windows for historical records, audits and older materials.
  • Employees who blow the whistle — the Act permits employees to disclose confidential information to the Commissioner in good faith and shields them from adverse employment action, with penalties for reprisals.

Who Bears the Cost

  • Provincial and local public bodies — must absorb increased administrative load: processing written requests, assisting applicants, managing third‑party notices, and meeting timelines (or paying legal costs if reviews follow).
  • Office of the Information and Privacy Commissioner — faces higher investigatory and enforcement workload and will need matching appropriations, given expanded powers to compel records and issue binding orders.
  • Third parties who supply information — must monitor notices, prepare representations within fixed windows, and may incur legal or consultancy costs to defend confidentiality claims.
  • Courts and judicial resources — judicial‑review windows and the enforceability of Commissioner orders via filing in Court of King’s Bench create potential litigation and enforcement workloads.
  • Small local public bodies and boards — may lack capacity for records management, timely responses and fee administration, increasing reliance on delegation or shared services.

Key Issues

The Core Tension

The central dilemma the Act tries to solve is the familiar but real trade‑off between maximizing public access to government records and protecting privacy, commercial confidentiality and effective governance. It gives strong tools to both sides—an empowered Commissioner and explicit public‑interest disclosure duties on one hand, and broad, time‑conditioned exemptions and operational discretion on the other—so the outcome turns on how heads, the Commissioner and the courts balance transparency against confidentiality in day‑to‑day decisions.

The Act centralizes transparency oversight while also embedding broad discretion to refuse disclosure. Many exemptions are drafted with catch‑all language (for example, “could reasonably be expected to”) and list presumptions about what constitutes an unreasonable invasion of privacy; those standards will generate interpretation disputes and likely case law.

Time‑limited exceptions (15/25/50 years) clarify archival releases but also require long‑term records management planning and risk reidentification of historical personal data.

Operationally, the Act combines procedural rigidity with discretionary levers. Heads can disregard or abandon requests, extend time limits for multiple reasons and rely on third‑party consultations; those levers help manage volume but also risk inconsistent denials.

The Commissioner’s power to compel records and issue final orders creates an enforceable remedy, but the option for judicial review and stays means that in practice some orders may be delayed. The Act’s fee regime and the right to excuse fees for public‑interest requests balance cost recovery and access, but real fee levels and waiver practices will determine whether fees function as barriers.

Several drafting choices create practical friction points: the separate rule that a public body may not make a section 7 request to another public body appears to restrict formal inter‑public‑body requests (even as transfers are permitted), which could complicate cross‑agency information retrieval. The Act’s broad delegation and regulation powers leave important procedural details to future regulations—especially around consent mechanisms, special procedures for mental‑health records and attestations for cabinet and Treasury Board claims—so implementation hinges on the forthcoming regulatory package and funding for the Commissioner’s office.

There's more to this law than the bill.

Codify Laws traces every connection across the legislative lifecycle.

Bill↓Regulations↓Statute↓Proclamation↓In-Force Date
Try Codify Laws →