Office of the Saskatchewan Information and Privacy Commissioner. Guide to FOIP, Chapter 6, Protection of Privacy. Updated 27 February 2023. 230 • The purposes for which the personal information will be collected, used and/or disclosed. • A statement that clearly restricts any subsequent disclosures of the personal information by the researcher in a form that could reasonably be expected to identify the individuals. • A statement of all the administrative, technical, and physical safeguards required to protect the confidentiality of the personal information, especially with respect to its use and disclosure. • A statement specifying whether information received by a government institution will be subject to the provisions of FOIP or, for other jurisdictions where comparable legislation exists, whether that legislation will apply. • A statement that the disclosure of the personal information will cease if the researcher is discovered to be improperly disclosing the information collected from the government institution. • The names, titles, and signatures of the officials in both the supplying and receiving organizations who are responsible for the terms of the agreement, the date of the agreement and the period for which it is in effect.658 Government institutions should still abide by the data minimization and need-to-know principles when disclosing personal information. Only disclose the least amount of personal information necessary to achieve the purpose. Further, only disclose to those that have a need-to-know the personal information to carry out the purpose. See Need-to-Know and Data Minimization earlier in this Chapter. IPC Findings As of the issuing of this Chapter, the Commissioner has not considered this provision in a Report yet. This section will be updated accordingly when it is considered. 658 Adapted from Service Alberta, FOIP Guidelines and Practices: 2009 Edition, Chapter 7 at pp. 270 to 271.
RkJQdWJsaXNoZXIy MTgwMjYzOA==