Across Canada, most provinces continue to use single statutes that combine access and privacy, while Alberta has adopted a two‑act model. Requirements for privacy management programs and AI‑related safeguards vary nationally, with Alberta’s framework placing increased emphasis on documented procedures and internal controls.