Alberta PIPA — Personal Information Protection Act (Alberta)

Alberta PIPA — Personal Information Protection Act (Alberta) — 83% of in-scope requirements covered.

3 requirements · 3 in scope (2 enforced · 1 designed). The 83% is weighted over the in-scope base.

Alberta PIPA: requirement → the KYE™ artefact that enforces it

Demo data

You learn: Which requirements KYE™ enforces at runtime and with which artefact. You can: Walk the requirements.

  1. s7 · enforced

    Sections 7-8 — Consent: an organisation must not collect, use or disclose personal information about an…

    Audit events: kye.purpose.request.v1, kye.purpose.admissibility.v1 · Constitution: 12 purpose permission

  2. s34 · enforced

    Section 34 — Protection of personal information: protect personal information by making reasonable security…

    Audit events: kye.purpose.admissibility.v1, kye.evidence.tool_call.v1 · Constitution: 30 audit worm retention

  3. 1 · designed

    Section 34.1 — Breach notification: notify the Commissioner without unreasonable delay of an incident…

    Audit events: kye.signal.incident.opened.v1, kye.compliance.attestation.v1 · Constitution: 13 resilience loop

How this widget is built
Demonstrates
KYE™ Compliance Mapping Rail™
Components
  • Framework requirement (clause)
  • Coverage status
  • KYE™ enforcement artefact (event, decision-record field, Evidence Pack™ entry)
Flow
Clause → status → the KYE™ artefact that enforces it, enforced requirements first. Architecture diagram
Used on

Source: Personal Information Protection Act, S.A. 2003, c. P-6.5 (Alberta), recognised as substantially similar to PIPEDA for the Alberta private sector, and notable as the first Canadian private-sector law to require mandatory breach notification to the Commissioner (s.34.1). Consent (ss.7-8), protection of personal information (s.34), and breach notification (s.34.1).

By category

CategoryReqsEnforcedDesignedAdvisoryDeferredCoverage
Consent (ss.7-8)11000100%
Protection of personal information (s.34)11000100%
Breach notification (s.34.1)1010050%

Every requirement → the KYE™ artefact that enforces it

IDTitleStatusKYE™ enforcement
alberta-pipa.s7Sections 7-8 — Consent: an organisation must not collect, use or disclose personal information about an individual without consent, except as authorised by the Actenforcedaudit_events: kye.purpose.request.v1, kye.purpose.admissibility.v1
engines: internal
constitution_refs: constitution/12-PURPOSE-PERMISSION.md
alberta-pipa.s34Section 34 — Protection of personal information: protect personal information by making reasonable security arrangements against risks such as unauthorised access, collection, use, disclosure, or disposalenforcedaudit_events: kye.purpose.admissibility.v1, kye.evidence.tool_call.v1
engines: internal
constitution_refs: constitution/30-AUDIT-WORM-RETENTION.md
alberta-pipa.s34.1Section 34.1 — Breach notification: notify the Commissioner without unreasonable delay of an incident involving the loss of or unauthorised access to personal information where there is a real risk of significant harmdesignedaudit_events: kye.signal.incident.opened.v1, kye.compliance.attestation.v1
engines: internal, internal
constitution_refs: constitution/13-RESILIENCE-LOOP.md

Canonical KYE™ surfaces referenced on this page: KYE Protocol™.