If you can't help me, who can?
Our office is the oversight body for three Saskatchewan laws: The Freedom of Information and Protection of Privacy Act, The Local Authority Freedom of Information and Protection of Privacy Act and The Health Information Protection Act. If you do not have an access or privacy issue that falls under one of those three statutes, there are other oversight bodies available to assist with any other concerns you may be facing:
- Saskatchewan Ombudsman: takes complaints about government services that include decisions/actions, failure to act and a delay in service.
- The Public Interest Disclosure Commissioner: deals with issues, receives disclosures and investigates matters surrounding complaints of wrongdoings made by public servants against his or her employer under The Public Interest Disclosure Act (PIDA).
- The Provincial Auditor: provides independent assurance and advice on the Government’s management, governance, and effective use of public resources.
- Office of the Privacy Commissioner of Canada: deals with privacy issues related to the Privacy Act and the Personal Information Protection and Electronic Documents Act (PIPEDA).
- Office of the Information Commissioner of Canada: investigates complaints about federal institutions’ handling of access requests under the Access to Information Act.
- Health Professional Associations: if you have a concern about a regulated health professional you should contact the appropriate Health Professional Association to learn the appropriate steps for you to take to make a complaint.
I work for a privately owned business in Saskatchewan and my employer is refusing me access to my personnel file.
There is very limited access to information and privacy protection laws in Saskatchewan that extend to employees of private businesses owned and operated in Saskatchewan.
If you work for an employer of a privately owned business that is also listed as a trustee under The Health Information Protection Act (HIPA) your personal health information within your employee file would most likely be protected under HIPA. If you are an employee in federal works, undertakings or businesses in Saskatchewan you may be covered under the federal law, the Personal Information Protection and Electronic Documents Act (PIPEDA). To learn more about the application of PIPEDA, read this Fact Sheet, found on the website of the Office of the Privacy Commissioner of Canada.
Unfortunately, these two laws would not apply to the majority of private sector employees. In order for access and privacy laws to apply to employees of the private sector in Saskatchewan, new legislation would need to be enacted to cover private sector employees, as has been done in B.C. and Alberta.
You may wish to contact the Human Resources area of your company to see if there are any written policies in place for access to your personnel or employee file. In addition, you can learn more about employee rights in Saskatchewan by clicking here.
Do the police fall under access and privacy legislation?
In 2017, amendments were made to The Local Authority Freedom of Information and Protection of Privacy Act. One of these amendments brought police services in Saskatchewan under this access and privacy legislation. The amendments were in force on January 1, 2018.
If you would like information about how to access information or make a privacy complaint about a police service, it is no different than the process for any other local authorities. Please click here for our resource on the access to information process and here for the privacy complaint process.
Please note, the RCMP is subject to the federal Access to Information Act and Privacy Act. Please visit the RCMP’s Access to Information and Privacy Branch website to learn more. The oversight bodies for the federal legislation are the Office of the Information Commissioner of Canada and the Office of the Privacy Commissioner of Canada.
I work with a private organization that is not engaged in commercial activity. As such, we are not covered by any federal privacy statutes or any of the statutes that the Saskatchewan Information and Privacy Commissioner oversees. What are some best practices to follow in relation to the collection, use and disclosure of member information?
Our office receives this question frequently when it comes time to establish member directories, emergency contact lists for parents, etc. The first step is to ensure the individuals who will be involved understand what information of theirs is being collected, why it is being collected, and how it will be used/disclosed. Examples of information include an individual’s name, telephone number, address and even photographs. Once they understand this, written consent should be obtained as to what information of theirs, if any, they are comfortable having disclosed. If an individual is a child, their parent or legal guardian can provide or decline consent on their behalf. Common methods of gathering consent include forms which update contact information that indicate what information may be disclosed, why it is being disclosed, where it will be disclosed and for how long. Lastly, ensure that individuals are able to opt out of having their information disclosed, and ensure you have a person who is responsible for addressing privacy concerns and correcting/removing information.