Guide to FOIP-Chapter 6

Office of the Saskatchewan Information and Privacy Commissioner. Guide to FOIP, Chapter 6, Protection of Privacy. Updated 27 February 2023. 21 • Any other discrete element of personal information that would enable a third party to deduce the identity of the person concerned.53 There are two types of identifiers: Direct identifiers Directly identifying variables can be used to uniquely identify an individual either by themselves or in combination with other readily available information. Examples can include name, telephone number or email address. Indirect or quasi-identifiers Indirectly identifying variables (quasi-identifiers) can be used to probabilistically identify an individual either by themselves or in combination with other available information. Examples can include sex, date of birth or postal code.54 Examples of quasi-identifiers can include sex, date of birth or age, geo-codes, first language, ethnic origin, aboriginal identity, total years of schooling, marital status, criminal history, total income, visible minority status, profession, health event dates, health-related codes, country of birth, birth weight, and birth plurality.55 Sufficient quasi-identifiers make it possible to identify an individual even in absence of a name, either on their own or in combination.56 53 British Columbia Government Services, FOIPPA Policy Definitions at https://www2.gov.bc.ca/gov/content/governments/services-for-government/policiesprocedures/foippa-manual/policy-definitions. Accessed April 23, 2020. 54 ON IPC resource, De-identification Guidelines for Structured Data, June 2016 at p. 4. See also Canadian Institute for Health Information (CIHI) resource, Best Practice Guidelines for Managing the Disclosure of De-Identified Health Information at pp. 12, 13 and 17. 55 Canadian Institute for Health Information, ‘Best Practice’ Guidelines for Managing the Disclosure of De-Identified Health Information, pp. 12, 13 and 17. 56 Canadian Institute for Health Information (CIHI) resource, Best Practice Guidelines for Managing the Disclosure of De-Identified Health Information at pp. 12, 13 and 17.

RkJQdWJsaXNoZXIy MTgwMjYzOA==