Office of the Saskatchewan Information and Privacy Commissioner. Guide to FOIP, Chapter 6, Protection of Privacy. Updated 27 February 2023. 120 (IMSP) provided the purpose for sharing is for one of the services or functions outlined in subsection 24.2(1) of FOIP. An information management service provider (or IMSP) means a person or body that performs one or more of the functions or provides one or more of the following services to a government institution: • Processes, stores, archives, or destroys records containing personal information (e.g., Crown Shred & Recycling) • Provides information management or information technology services with respect to records containing personal information (e.g., Government of Saskatchewan Information Technology Services Branch, SaskBuilds and Procurement IT Division, private companies offering case file management services)360 An information management service provider might also do the following on behalf of a government institution: • Combine records (e.g., merging or deleting duplicate records) • Provide consulting services361 Subsection 24.2(2) Information management service provider 24.2(2) Before disclosing personal information to an information management service provider, a government institution shall enter into a written agreement with the information management service provider that: (a) governs the access to and use, disclosure, storage, archiving, modification and destruction of the personal information; (b) provides for the protection of the personal information; and (c) meets the requirements of this Act and the regulations. 360 The Freedom of Information and Protection of Privacy Act, SS 1990-91, c F-22.01 at subsection 2(1)(e.1). 361 Government of Alberta, Health Information Act, Guidelines and Practices Manual, March 2011 at p. 164. Available at https://open.alberta.ca/dataset/50877846-0fba-4dbb-a99feeb651533bc4/resource/3e16d527-2618-48ae-80b8-93f69973878e/download/hia-guidelinespractices-manual.pdf. Accessed June 23, 2020.
RkJQdWJsaXNoZXIy MTgwMjYzOA==