Alberta voter data breach investigation expands as privacy commissioner launches probe

A major political and privacy controversy continues to escalate in Alberta after Elections Alberta issued cease-and-desist letters to hundreds of people linked to a searchable online database containing sensitive voter information belonging to nearly three million Albertans.

The growing scandal has now triggered multiple investigations involving Elections Alberta, the RCMP and Alberta’s Information and Privacy Commissioner.

Alberta Information and Privacy Commissioner Diane McLeod announced Thursday that her office has formally launched an investigation into allegations surrounding the collection, use and disclosure of personal voter information connected to the separatist organization known as the Centurion Project.

The investigation comes after Elections Alberta previously obtained a temporary court injunction forcing the separatist group to remove a publicly accessible database that allegedly contained names, addresses and voter registration information belonging to millions of Alberta voters.

According to Elections Alberta, cease-and-desist letters were sent to 23 individuals identified as having directly received copies of the voter list from the Centurion Project.

Another 545 individuals who allegedly accessed the database also received warning notices from Alberta’s chief electoral officer Gordon McClure.

Election officials said the 23 recipients who allegedly received copies of the list are now required to submit signed declarations confirming they have complied with instructions to destroy or stop using the information within 48 hours.

The voter database controversy has rapidly become one of the province’s most politically explosive issues, especially as questions grow about how official voter information ended up in the hands of a separatist organization.

Elections Alberta has stated that its investigation determined the database originated from an official electors list legally provided to the Republican Party of Alberta.

Under Alberta law, those voter lists can only be distributed to authorized political parties and elected officials and cannot legally be shared with outside groups or third parties.

Officials said the lists are intentionally “salted” with fake names to help investigators trace unauthorized leaks.

That process reportedly allowed Elections Alberta investigators to connect the Centurion Project database directly to the Republican Party of Alberta.

However, exactly how the data moved from the political party to the separatist organization remains unclear.

The Centurion Project has claimed the information was supplied by an unnamed third party.

In a statement issued earlier, the group said its online database was intended as a volunteer organizing tool designed to help supporters engage in political canvassing and civic participation.

Centurion Project leader David Parker defended the system by comparing it to a publicly available phone book, arguing the information was being used to identify potential separatist supporters ahead of a possible Alberta independence referendum.

The privacy breach has intensified political tensions inside Alberta’s legislature.

Premier Danielle Smith has repeatedly denied prior knowledge of the database issue and said she only became aware of the breach through media reports last week.

The controversy deepened after the Alberta NDP revealed that a United Conservative Party caucus staff member attended an April online meeting hosted by the Centurion Project, during which the database was allegedly demonstrated by searching former premier Jason Kenney’s personal information, including his home address.

Opposition Leader Naheed Nenshi has questioned how government officials failed to immediately recognize the seriousness of the breach.

Meanwhile, Smith has criticized the NDP for not informing the government sooner after the opposition reported the incident to RCMP investigators.

The RCMP continues to investigate the matter separately.

Alberta’s privacy commissioner had initially suggested her office may not have jurisdiction because provincial privacy legislation does not directly apply to political parties.

However, Diane McLeod confirmed Thursday that her office is proceeding under provisions of Alberta’s Personal Information Protection Act that authorize investigations to ensure compliance with privacy laws.

The investigation will examine whether the Centurion Project improperly collected, used or disclosed personal information and whether adequate safeguards were in place to protect the data.

Officials will also determine whether the organization had a legal obligation to notify affected individuals about the breach.

The legal battle surrounding the database is expected to continue throughout the summer.

A Court of King’s Bench hearing has now been scheduled for late July, when Elections Alberta will seek a permanent injunction against both the Centurion Project and the Republican Party of Alberta.

During a brief court hearing in Edmonton on Thursday, Elections Alberta lawyer Joseph Redman confirmed all parties requested additional time to prepare legal arguments and affidavits.

Justice Thomas Rothwell granted the adjournment request.

Lawyers representing the Centurion Project and the Republican Party of Alberta were not present during Thursday’s proceedings.

The controversy has also reignited broader concerns about privacy protections surrounding voter information in Alberta.

Advocates, municipal leaders and domestic violence support organizations have expressed concern about the risks posed when personal addresses and voter information become publicly accessible online.

Calls are now growing for legislative reform and a broader public inquiry into how Alberta’s voter data is handled and protected.

As investigations continue, the scandal has become deeply intertwined with Alberta’s increasingly polarized debate over separatism, political accountability and public trust in democratic institutions.

Courtesy: CBC