The Personal Information Protection Act (Statutes of Alberta 2003 chapter P-6.5) ('AB PIPA')

AB PIPA does not specifically regulate data transfers. However, it does regulate 'disclosure', which, according the the Official Guidelines, involves 'sharing personal information with another entity.' According to Section 19 of AB PIPA, an organisation may disclose personal information only: 

1. for purposes that are reasonable for meeting the purposes for which the information is disclosed; or 
2. with the consent of the individual.

According to Section 20 of AB PIPA, an organisation may disclose personal information about an individual without their consent if: 

1. a reasonable person would consider that the disclosure of the information is clearly in the interests of the individual and consent of the individual cannot be obtained in a timely way or the individual would not reasonably be expected to withhold consent; 
2. the disclosure of the information is required by law; 
3. to a public body, debt collection agency or other organisations; 
4. the disclosure is for the purposes of contacting the next of kind or a friend of an injured, ill or deceased individual; the disclosure of the information is reasonable for the purposes of an investigation or legal proceeding or for the purposes of the prevention, detection or suppression of, fraud, and the information is disclosed to an organisation that is permitted or otherwise empowered to carry out any of those purposes; 
5. the disclosure of the information is necessary to respond to an emergency that threatens the life, health or security of an individual or the public;
6. the information is publicly available, as prescribed or otherwise determined by the regulations; or 
7. the disclosure is in accordance with Section 20.1, 21 or 22 (see below). 

Under Section 21(1) of AB PIPA, an organisation may disclose personal employee information about an individual without the consent of the individual if the information is disclosed solely for the purposes of (a) establishing, managing or terminating an employment or volunteer-work relationship, or (b) managing a post-employment or post-volunteer-work relationship, between the organisation and the individual. The disclosure must also be reasonable for the particular purpose for which it is being disclosed, and, in the case of an individual who is a current employee of the organisation, the organisation has, before disclosing the information, provided the individual with reasonable notification that his/her personal information is going to be disclosed and of the purposes for which the information is going to be disclosed. 

Additionally, it can disclosure personal information about an individual who is a current or former employee of the organisation to a potential or current employer of the individual without the consent of the individual if: 

1. the personal information that is being disclosed was collected by the organisation as personal employee information; and 
2. the disclosure is reasonable for the purpose of assisting that employer to determine the individual's eligibility or suitability for a position with that employer. According to Section 22, personal information may be disclosed for the purposes of a business transaction, if: 
   1. the parties have entered into an agreement under which the collection, use and disclosure of the information is restricted to those purposes that relate to the business transaction; and 
   2. the information is necessary: for the parties to determine whether to proceed with the business transaction; and if the determination is to proceed with the business transaction, for the parties to carry out and complete the business transaction.

Official Guidelines on the general application of AB PIPA issued by the Office of the Information and Privacy Commissioner in November 2008 and Official Guidelines on collection, use and disclosure of personal information under AB PIPA issued by the Office of the Information and Privacy Commissioner of Alberta in 2009.

Please see Canada - Data Transfers Note

The Personal Information Protection Act (Statutes of British Columbia 2003, c. 63) ('BC PIPA')

BC PIPA does not specifically regulate data transfers. However, it does regulate 'disclosure', which, according the the Official Guidelines, involves 'showing, sending or giving some other organisation, government or individual the personal information in question.' An organisation may disclose personal information only: 

1. for purposes that a reasonable person would consider are appropriate in the circumstances and that the data subject has been notified of in advance, as per Section 17 of BC PIPA; or
2. with the consent of the individual, as per Section 6(1) of BC PIPA.

According to Section 18 of BC PIPA, an organisation may disclose personal information about an individual without their consent if: 

1. the disclosure of the information is clearly in the interests of the individual and consent of the individual cannot be obtained in a timely way; 
2. the disclosure is necessary for the medical treatment of the individual and the individual does not have the legal capacity to give consent; 
3. it is reasonable to expect that the disclosure with the consent of the individual would compromise an investigation or proceeding and the disclosure is reasonable for purposes related to an investigation or a proceeding;
4. the information is collected from certain public events; the disclosure is necessary to determine a suitability  to receive an honour, award or similar benefit, including an honorary degree, scholarship or bursary, or to be selected for an athletic or artistic purpose;
5. the disclosure is necessary in order to collect a debt owed to the organisation or for the organisation to repay an individual money owed to them by the organisation;
6. the personal information is disclosed in accordance with a provision of a treaty that British Columbia or Canada is a party to and that authorises or requires its disclosure;
7. the disclosure is for the purpose of complying with a subpoena, warrant or order issued or made by a court, person or body with jurisdiction to compel the production of personal information;
8. the disclosure is to a public body or a law enforcement agency in Canada, concerning an offence under the laws of Canada or a province, to assist in an investigation, or in the making of a decision to undertake an investigation, to determine whether the offence has taken place, or to prepare for the laying of a charge or the prosecution of the offence;
9. there are reasonable grounds to believe that compelling circumstances exist that affect the health or safety of any individual and if notice of disclosure is mailed to the last known address of the individual to whom the personal information relates;
10. the disclosure is for the purpose of contacting next of kin or a friend of an injured, ill or deceased individual;
11. the disclosure is to a lawyer who is representing the organisation; the disclosure is to an archival institution if the collection of the personal information is reasonable for research or archival purposes; or
12. the disclosure is required or authorised by law.

Additionally, under Section 19 of BC PIPA, an organisation may disclose employee personal information without the consent of the individual where the disclosure is reasonable for the purposes of establishing, managing or terminating an employment relationship between the organisation and the individual, as long as it notifies the individual of the disclose, and the purposes for the dislcosure, beforehand.

Moreover, according to Section 20 of BC PIPA, an organisation may disclose personal information about its employees, customers, directors, officers or shareholders without their consent, to a prospective party to a business transaction that involves substantial assets other than the data subjects' personal information. This applies if the personal information is necessary for the prospective party to determine whether to proceed with the business transaction, and the organisation and prospective party have entered into an agreement that requires the prospective party to use or disclose the personal information solely for purposes related to the prospective business transaction.

According to Sections 21 and 22 of BC PIPA, an organisation may disclose information without consent, for research, statistical, archival or historial purposes, in certain circumstances.

Under Section 30 of the Freedom of Information and Protection of Privacy Act, RSBC 1996 c 165 a public body must ensure that personal information in its custody or under its control is stored only in Canada and accessed only in Canada, unless one of the following applies:

1. if the individual the information is about has identified the information and has consented, in the prescribed manner, to it being stored in or accessed from, as applicable, another jurisdiction;
2. if it is stored in or accessed from another jurisdiction for the purpose of disclosure allowed under this Act;
3. if it was disclosed under Section 33.1 (1) (i.1).

Official Guidelines on the general application of BC PIPA issued by the Office of the Information and Privacy Commissioner in October 2015. 

Canada - Data Transfers Note