1. I Have a Privacy Complaint
Your privacy complaint must involve personal information (pi) or personal health information (phi). Please see subsection 24(1) of FOIP and subsection 2(m) of HIPA for full definitions of pi and phi.
The following are examples of what might constitute a breach: employee snooping, over collection, unauthorized use or disclosures, inadequate safeguards, inaccurate pi or phi.
2. Submit Your Complaint to the Public Body
3. Wait (approximately) 30 Days
The public body has (approximately) 30 days to respond. The 30 day deadline gives the public body a reasonable amount of time to conduct its internal investigation which can sometimes involve interviewing witnesses, reviewing audit logs, policies, procedures, etc.
Not Satisfied?
If you do not receive a response, or are dissatisfied with the public body’s response, you can make your complaint to the IPC. Please note that the IPC generally does not investigate a matter that is more than two years old for a number of reasons including the unavailability of witnesses or failing memories
4. Outline Your Complaint
Your complaint must be made in writing and include a detailed description of the alleged breach, including dates/timelines, name of the public body against whom the complaint is made and any documentation that supports your allegations.
- Please use the following form to outline your complaint: Alleged Breach of Privacy Reporting Form for Affected Individuals/Complainants
Your complaint should also confirm whether or not you wish to be treated anonymously with the public body. Note: this may not always be possible.
5. Submit Your Complaint to the IPC
It is our office’s preference that complaints be submitted by email to: intake@oipc.sk.ca. You can also submit your complaint by mail or in person to:
Saskatchewan Information and Privacy Commissioner
Regina SK S4P 4B4
503 – 1801 Hamilton Street
Please include copies of any correspondence with the public body relevant to the complaint.
6. IPC Investigates
Once it is determined that the IPC has jurisdiction and grounds to investigate, an Analyst will be assigned to the file. The Analyst will gather information from the public body and the complainant to determine the relevant facts and define the issues.
The Analyst will attempt to mediate, or informally resolve, the complaint.
7. Report and Response
8. Appeal to Court
If you are not satisfied with the Commissioner’s recommendations related to FOIP/LA FOIP and/or the public body’s response, you can appeal to the Court of King’s Bench.
There may be a limited right to appeal to the Court of King’s Bench by an aggrieved complainant if the complaint was handled under HIPA pursuant to section 42(1)(c).
The IPC is not involved in this step. You may consult a lawyer.