The Personal Information Protection Act (PIPA) came into force on January 1, 2004.
The Act protects individual privacy by requiring, in most cases, private-sector organizations to obtain consent for the collection, use and disclosure of personal information and providing individuals with a right of access to their own personal information.
The Act also requires private sector organizations to notify the Privacy Commissioner if personal information under their control is accessed, lost, or disclosed without authorization.
Alberta was the first Canadian jurisdiction to require mandatory privacy breach notification by private sector organizations.
The full text can be downloaded at http://servicealberta.ca/pipa/