Office of the Saskatchewan Information and Privacy Commissioner. Guide to FOIP, Chapter 6, Protection of Privacy. Updated 27 February 2023. 113 • The removal of equipment – e.g., theft of a laptop or file containing personal information, use of information outside the office (e.g., using the information on a home computer), disposal of information at the employee’s home. • Information not being available – e.g., records that are misdirected or misfiled, or that are destroyed in a manner that is not in accordance with approved records retention and disposition schedules or policies.339 Government institutions should determine the likelihood (low, medium, or high) of each or any of the above threats occurring. Identify the potential consequences and rate the seriousness (less serious, serious, or very serious) of the events if they were to occur.340 Subsection 24.1(b)(iii) Duty of government institution to protect 24.1 Subject to the regulations, a government institution shall establish policies and procedures to maintain administrative, technical and physical safeguards that: … (b) protect against any reasonably anticipated: … (iii) unauthorized access to or use, disclosure or modification of the personal information in its possession or under its control; and Subsection 24.1(b)(iii) of FOIP requires government institutions to establish written policies and procedures that protect against any reasonably anticipated unauthorized access, use or disclosure or unauthorized modification of personal information. 339 Government of Alberta, Health Information Act, Guidelines and Practices Manual, March 2011 at p. 318. Available at https://open.alberta.ca/dataset/50877846-0fba-4dbb-a99feeb651533bc4/resource/3e16d527-2618-48ae-80b8-93f69973878e/download/hia-guidelinespractices-manual.pdf. Accessed June 23, 2020. 340 Government of Alberta, Health Information Act, Guidelines and Practices Manual, March 2011 at p. 318. Available at https://open.alberta.ca/dataset/50877846-0fba-4dbb-a99feeb651533bc4/resource/3e16d527-2618-48ae-80b8-93f69973878e/download/hia-guidelinespractices-manual.pdf. Accessed June 23, 2020.
RkJQdWJsaXNoZXIy MTgwMjYzOA==