Office of the Saskatchewan Information and Privacy Commissioner. Guide to FOIP, Chapter 3, Access to Records. Updated 5 May 2023. 173 • Something you are (e.g., biometric data, such as fingerprints, iris scans, voice patterns).296 In some cases, one of these factors may be used alone to authenticate an individual; for others, combinations may be used. There are multiple ways to confirm the identity of the applicant. The degree of authentication should be appropriate to the sensitivity of the personal information involved. For more on verifying identity, see the Ministry of Justice and Attorney General resource, Verifying the Identity of an Applicant. IPC Findings In Review Report 277-2017, an individual had given consent for another individual to act on the individual’s behalf and access any records containing the subject individual’s personal information. Rather than accept the consent form, the Ministry of Corrections and Policing asked the applicant for further details regarding the subject individual’s consent. Upon review, the Commissioner agreed with the Ministry of Corrections and Policing that the consent form was too vague because it: • Was not addressed to the Ministry of Corrections and Policing; • Was not clear the subject individual understood what specific personal information was to be disclosed to the applicant; • Was older with the consent signed ten months earlier. It did not have an effective and expiration date; • Was not clear if the subject individual voluntarily gave the consent or if it was obtained through misrepresentation, fraud or coercion. The Commissioner recommended that the Ministry of Corrections and Policing try to work with the applicant and the subject individual to obtain informed consent. 296 Service Alberta, Bulletin #17, Consent and Authentication at p. 2.
RkJQdWJsaXNoZXIy MTgwMjYzOA==