Calgary Voter Data: Your personal info may be exposed by insiders

[CALGARY, AB] — Your name, address, and voting history sit inside a provincial database. Elections Alberta is now investigating whether someone handed that database to people who had no legal right to see it, according to a post flagged on r/Alberta.

What the List Actually Is

The provincial List of Electors is not a public document. Under Sections 18, 19, and 20 of Alberta's Election Act, access is restricted to registered political parties, Members of the Legislative Assembly, and candidates — and only for electoral purposes. The moment that data leaves those authorized hands, the law has been broken.

Elections Alberta says it is taking every possible action to determine whether an inappropriate distribution occurred and to protect and recover the information. The agency has also notified the Office of the Information and Privacy Commissioner of Alberta (OIPC), which operates independently to enforce privacy rights.

The Suspect Is Already Inside the Building

Here is the uncomfortable detail: Elections Alberta's own systems do not appear to have been breached. The alleged leak is believed to involve a registered political party that had legitimately received the list and may have failed to protect it as required. Section 19.1 of the Election Act is explicit — recipients must take all reasonable steps to safeguard the data and immediately report any loss.

In other words, the problem is not a hacker. It is a trusted insider who may have ignored the rules.

The Penalties Look Serious on Paper

Contravening the Election Act's electors list provisions carries an administrative penalty of up to $10,000, or on conviction, up to one year in prison, or both. Those numbers have not historically inspired much fear.

The newer legislation carries sharper teeth. Alberta's Protection of Privacy Act, 2024 (POPA), which came into force on June 11, 2025, sets penalties up to $200,000 for individuals and $1 million for organizations found to have misused personal information. Whether POPA applies to this specific situation will likely depend on how the OIPC characterizes the alleged conduct.

A Deadline Already Looming

The timing adds pressure. Under POPA, all public bodies in Alberta are required to have a formal privacy management program in place by June 11, 2026 — six weeks from now. The Election Statutes Amendment Act, 2025 (Bill 54) came into force on July 4, 2025, and the Justice Statutes Amendment Act, 2025 (Bill 14) followed on December 11, 2025, both aimed at strengthening democratic integrity. The legislative scaffolding is new and largely untested.

What This Means for Your Ballot

To be fair, Elections Alberta releasing the list to authorized parties after an election is standard procedure — it happened on April 2, 2024, following the provincial general election. The system is designed to function this way. The question is whether the accountability mechanisms attached to that distribution are strong enough to deter misuse.

For Calgarians between 35 and 55 who have watched privacy scandals play out federally and municipally, the answer to that question will matter well before the next ballot drops.

The investigation is ongoing. No political party has been publicly named. And the $10,000 maximum penalty that has governed this file for years is still the most likely outcome — unless the OIPC decides the new rules apply.