Alberta’s privacy commissioner says combining three forms of identification into one could pose new risks to personal information, and the office is developing guidance.