5 Office of the Saskatchewan Information and Privacy Commissioner. Best Practices for Administrative Tribunals When Publishing Decisions. Updated February 2025. health number and any other information, such as the individual’s address or phone number, a trustee collects for the purpose of registering the individual for a health service. The Health Information Protection Regulations, 2023, further defines personal health information to include genetic information that includes information about an individual’s genetic test results/testing, the genetic test results of an individual’s family members, and the individual’s family medical history. Need-to-Know and Data Minimization If you are an organization that is subject to Saskatchewan’s access and privacy laws, collecting, using, and disclosing personal information/personal health information are always subject to the “need-to-know” and “data minimization” principles. These principles underlie PART IV of FOIP, LA FOIP and HIPA: • The “need-to-know” principle is the rule that personal information/personal health information should only be available to those in an organization who have a legitimate need to know that information to deliver the organization’s mandated service. Identifying “need-to-know” requires an organization to consider what data elements it requires and to separate out those that it does not for the identified purpose. Administrative tribunals should also only allow those who have a “needto-know” to have access to personal information/personal health information. • The “data minimization” principle is the rule that organizations should only collect, use and disclose the least amount of personal information/personal health information necessary for the purpose. Disclosure is occasionally mandatory but is most often discretionary, or there is discretion to disclose the least amount of identifying information required for the purpose. When publicly posting decisions, administrative tribunals should take care to disclose only the amount of personal information/personal health information necessary for the purpose. Public Interest Considerations for Disclosure of Personal Information In Saskatchewan, public interest considerations are found in FOIP, LA FOIP and HIPA. None of these laws has a general public interest override, such as ones found
RkJQdWJsaXNoZXIy MTgwMjYzOA==