The Alberta EHR Regulation

Understand the rules that govern how health information is securely shared and managed in Alberta’s Electronic Health Record (Alberta Netcare).

Last updated: November 2025   

Overview

The Alberta Electronic Health Record (EHR) Regulation is a regulation under the Health Information Act (HIA). It sets the rules for how health information is used, shared and protected within the province’s EHR—Alberta Netcare.

Key Elements of the Regulation

  • Authorized Custodian Eligibility Requirements: To participate in Alberta Netcare, custodians must meet eligibility criteria as described in the Regulation – including submitting privacy impact assessments, implementing appropriate safeguards, and meeting technical and security requirements.
  • Classes and Types of Health Information: The Regulation sets out the kinds of health information that may or must be made available through Alberta Netcare, supporting continuity and quality of care.
  • Logging, Auditing and Investigations: The Regulation sets the requirements for comprehensive access logs, in accordance with the Provincial Logging and Auditing Standard. It also sets requirements for regular audits and investigations.
  • Limiting, Revoking and Prohibiting Access to Alberta Netcare: The Regulation outlines procedures for limiting, revoking, or prohibiting access to Alberta Netcare in cases of non-compliance or misuse.
  • Access to Alberta Netcare by Office of the Chief Medical Examiner and Limited Health Services Providers Outside Alberta: The Regulation sets eligibility and compliance requirements for these authorized users. 

October 2025 Amendments

Amendments to the HIA  modernize the legal framework governing the EHR. As part of this shift, the Information Manager Agreements (IMAs) and their appendix, the Information Exchange Protocol (IEP), were terminated. There is a new Access to the Alberta EHR (Alberta Netcare) Declaration (view a copy) that authorized custodians must accept. Additionally, the amendments expand how authorized custodians may use health information, enable limited out-of-province access for eligible providers, and formalize Office of the Chief Medical Examiner (OCME) access under law.


Click the categories below to view FAQs related to the amendments.

Updated Role of the Department


What is the updated role of the Department?

The Department was previously designated as the Information Manager responsible for managing Alberta Netcare. Amendments clarify and expand the role and duties of the Department in managing and operating Alberta Netcare. These changes establish a transparent and comprehensive regulatory framework for both the Department and authorized users.  

Why were these changes made?

The amendments enable the health system to accommodate technology modernization and meet the needs of a refocused health care system while enhancing privacy protections for Albertans.

Access for the OCME


Why was Alberta Netcare access extended to the OCME?

The amendments enable the department to grant medical examiners and their staff with the Office of the Chief Medical Examiner (OCME) access to Alberta Netcare for the sole purpose of conducting investigations under the Fatality Inquiries Act (FIA). This access supports the efficiency of OCME investigations, providing them with timely access to needed information and a more complete picture of an individual’s health status when determining the cause of death.

How will OCME access be regulated? Can they share information with law enforcement?

The OCME and OCME staff who are granted access to the Alberta EHR will have ongoing obligations and responsibilities for compliance with the HIA and regulations, training obligations, and safeguards and policies. Access is strictly limited to investigations under the FIA. The OCME cannot share the information with law enforcement.

Out of Province Access


What changes have been made to out of province access to Netcare?

The amendments enable the Department to grant out-of-province health service providers access to the Alberta EHR. Eligibility requirements are established for providers who provide health services in communities outside of Alberta, with the Department maintaining control over which communities qualify as eligible communities.

Will Netcare Access be extended outside of Canada?

No. Access to health care providers outside of Canada is not authorized.

How will misuse of Netcare by out of province providers be addressed?

Misuse of health information by health service providers (i.e. in Lloydminster, Saskatchewan) falls under that province’s privacy legislation and privacy oversight body. Like providers in Alberta, regulated health professionals in other jurisdictions are subject to the standards of practice set by their regulated health professional bodies, including requirements for protecting patient privacy. Agreements established to facilitate this access include consequences for inappropriate access to Netcare.

Will there be any limits on where people with access to Netcare can and cannot be located?

Yes. Access to Netcare is based on a health service provider’s need to access the system to provide health services to Albertans. Currently access will only be enabled to providers in Lloydminster, Saskatchewan who meet the eligibility requirements for the purpose of providing health services to Albertans. Access outside of Canada will not be authorized.

Why is Netcare access being extended to Lloydminster, Saskatchewan?

Providers and community members in Lloydminster have consistently requested access to support Alberta-based patients receiving care on both sides of the border. This change improves continuity of care by enabling access to complete patient information.

How will Albertans’ health information be protected outside of Alberta?

All users must meet eligibility criteria under the Alberta EHR Regulation and are assigned permission levels appropriate to their role. Agreements include safeguards and consequences for inappropriate access.

Access to Alberta Netcare Declaration


What is the Access to Alberta Netcare Declaration and why was it introduced?

The Access to Alberta Netcare Declaration is a formal acknowledgment that outlines the responsibilities of authorized custodians and their affiliates when accessing and using Alberta’s EHR. It supports Alberta’s updated legal and regulatory framework for managing the EHR.   

What happens to the Information Manager Agreement (IMA) and Information Exchange Protocol (IEP)?

The IMA and IEP are no longer in effect following the recent amendments to HIA. Authorized Custodians will continue to be accountable under the HIA and the updated EHR Regulation. To support this, custodians will digitally accept the Access to Alberta Netcare Declaration at first login after activation on December 1st and in future if substantial changes are made to the Declaration. Acceptance will be logged and auditable, supporting accountability in cases of misuse.

What does the declaration include?

The Declaration:
  • Outlines custodians’ responsibilities under the updated regulatory framework.
  • Reinforces and operationalizes provisions in the HIA and Alberta EHR Regulation.
  • Ensures custodians and their affiliates understand and comply with privacy and security obligations.
  • Is publicly available to promote transparency and accountability.
     


To whom does it apply?

 
  • The Declaration applies to authorized custodians in community settings. Custodians must accept the Declaration to access Alberta Netcare. Declining it will result in denied access.
  • Affiliates (e.g., administrative staff) and AHS-only users will continue to follow the Alberta Netcare Portal Disclaimer.
     


Who can I contact if I have questions or need support when logging into Netcare?

For assistance with the Access to Alberta Netcare Declaration or issues accessing Netcare, support is available through the following contacts:
  • eHealth Services Provider Support: 1-855-643-8649 — for questions about eligibility, technical assistance, or access issues.
  • HIA Help Desk: hiahelpdesk@gov.ab.ca or 780-427-8089 — for questions related to compliance or regulatory obligations under the HIA.


Broadened Use of Alberta Netcare


How can authorized custodians use health information in Netcare?

Community-based authorized custodians are now permitted to use health information accessible via Alberta Netcare for all purposes listed under section 27(1) of the HIA. This amendment creates consistency between how these custodians may use health information accessible via ANP with how they may otherwise use health information in their custody or under their control .  These additional uses are subject to the custodians’ regular HIA duties to only collect, use or disclose health information if authorized by the HIA and to do so in a limited manner.

Will this allow Netcare to be used for research purposes, not just patient care?

Yes, amendments align the use of health information with existing HIA use purposes. The HIA has strict requirements for the use of health information for research by custodians and researchers.