Office of the Saskatchewan Information and Privacy Commissioner. Guide to FOIP, Chapter 6, Protection of Privacy. Updated 27 February 2023. 317 2. At the outset, provide a detailed context. This should include: • A detailed overview of the proposed initiative. • A description of the underlying purposes and rationale for the initiative and of the need for personal information. • A detailed description of the information to be collected, used, and/or disclosed. • A detailed description of the “information flow” – who will use it and for what purposes; to whom it will be disclosed and for what purposes; etc. • An analysis of how the proposed collection and handling of personal information balances the benefits of the proposed initiative and the impact on individual privacy. Is the proposed initiative: o Necessary to achieve the intended purpose. o Effective in achieving the intended purpose. o Proportional that is, the loss of privacy is proportional to the benefit gained and there is no less privacy intrusive means of achieving the purpose. (See Necessary, Effective & Proportional earlier in this Chapter) 3. Analyze, in detail, the “information flow” using privacy principles – and the questions that flow from these principles – as a framework. Each instance of collection, use, disclosure, retention, protection, and disclosure of personal information must be 'tested' against the privacy principles that are reflected in FOIP. These principles are: • Accountability • Identifying purposes (and informing of purposes) • Consent • Limiting collection • Limiting use, disclosure, and retention • Accuracy • Safeguarding • Openness • Individual access to and correcting one's own information
RkJQdWJsaXNoZXIy MTgwMjYzOA==