Privacy Policy

Access to Information and Protection of Privacy

Effective June 11, 2025, the Freedom of Information and Protection of Privacy Act (FOIP) has been repealed and replaced by two new statutes:

• Access to Information Act (ATIA) – governs access to records held by public bodies.
• Protection of Privacy Act (POPA) – governs the collection, use, disclosure, and safeguarding of personal information.

Privacy Management Program

Under Alberta’s Protection of Privacy Act (POPA), the City is required to establish and maintain a comprehensive Privacy Management Program. The Privacy Management Program provides a structured approach to ensuring that personal information in the custody or control of the City is collected, used, disclosed, and protected in accordance with legislative requirements. It also supports transparency, accountability, and consistent privacy practices across the organization.

Commitment

The City is committed to protecting personal information and managing it in a responsible and transparent manner, in compliance with applicable legislation. Upholding privacy is both a legal obligation and an organizational priority. Strong privacy practices contribute to maintaining public trust, reducing the risk of privacy breaches, and ensuring sound stewardship of personal information. Through a proactive and well-supported Privacy Management Program, the City strengthens its accountability and reinforces a culture of privacy awareness.

Designating the Privacy Officer

The General Manager of Corporate Services is designated as the City’s Privacy Officer and is responsible for overseeing the administration of the Access to Information Act and the Protection of Privacy Act, ensuring compliance with legislative requirements and supporting organizational privacy practices.

Training for Employees

All employees, both new and current, are required to complete access and privacy training. This training must be refreshed at least once every three years, with additional or earlier training provided as needed to reflect changes in legislation, organizational requirements, or specific role-based responsibilities.

Training for Service Providers

Any third-party service providers, contractors, or vendors who access City systems or handle personal information on behalf of the City are required to complete access and privacy training This includes those engaged under new and ongoing contracts. Training must be completed prior to access being granted and refreshed at intervals consistent with City requirements, or more frequently as needed to reflect changes in legislation, contractual obligations, or service scope.

Accessing Information under ATIA

If you wish to make a request for information under the Access to Information Act, complete the Access Request Form. You can generally expect a response within thirty business days. You may need to bring photo identification when picking up your information.

While there is no charge to obtain personal information, there may be charges for photocopying ($0.25/page). For general information requests, there is an initial charge of $25, and a charge of $27 per hour for locating, retrieving, preparing, and handling the records for disclosure.

If you are unsure whether your request falls under ATIA, please contact the City’s Privacy Officer legservices@camrose.ca. 

Before you Get Started

Not all requests for information require a formal access request.  The information you may want may already be publicly available on our website:

Registered owners can access their property information without going through an Access to Information request by contacting the department responsible for that information. 

Directory of Personal Information Banks

POPA requires public bodies to publish a directory of all personal information banks. View the full listing of personal information banks.

Personally Identifiable Information Available

The IP (Internet Protocol) numbers of computers used to visit our websites are noted as part of our statistical analysis to improve services and access. The site does not attempt to associate IP addresses with individual users.

Restrictions on the Disclosure of Customer Information

Our users are important to us. In accordance with POPA, the City of Camrose does not sell or rent users' personal information to any outside company or organization. We do not disclose personally identifiable information to unaffiliated third parties for their independent use, except where required by law.

We strive to collect only the minimum amount of personal information necessary to fulfill the purpose for which our digital services were created, and we ensure that all collection, use, and disclosure of personal information complies with POPA.

Other Websites and Social Media

Various websites may be linked through the City of Camrose’s website. Visitors are advised to review the privacy statements of these external sites before providing personal information.

The City of Camrose uses interfaces with social media platforms such as Facebook, Twitter, and YouTube. If you choose to "like" or "share" content from our website, please review the privacy policies of those services. These interfaces may allow social media platforms to associate your visits to our site with other personal information.

Website Analytics

Our website uses Google Analytics, a service that transmits website traffic data to Google servers. The City of Camrose uses reports from Google Analytics to understand website traffic and webpage usage.

By using www.camrose.ca and affiliated municipal websites, you consent to the processing of data about you by Google in the manner described in Google's Privacy Policy. You can opt out of Google Analytics by disabling cookies, turning off JavaScript, or using Google’s opt-out tool.

Use, Collection, and Retention of Customer Information

In accordance with POPA, we collect information such as IP address, browser type, visit date/time, and linked pages for statistical reporting purposes only.

We collect, retain, and use personal information only when essential and permitted by law, to administer our services and respond to customer needs. We are committed to ensuring that personal information is accurate, secure, and retained only as long as necessary.

Protection of Information via Established Security Procedures

The City of Camrose maintains security standards and procedures to prevent unauthorized access, removal, or alteration of personal information. These measures are guided by internal policies and best practices and are designed to support compliance with POPA.

As we continue to enhance our privacy practices, the City is working toward the development of a formal Privacy Management Program, as required under POPA.

Limiting Employee Access to Information

Our Information Technology Policy limits employee access to personal information to only those who require it to perform their duties. Supervisors are responsible for enforcing staff responsibilities in protecting personal information, in line with POPA’s requirements for staff training and accountability.