Guide to FOIP-Chapter 6

Office of the Saskatchewan Information and Privacy Commissioner. Guide to FOIP, Chapter 6, Protection of Privacy. Updated 27 February 2023. 343 correspondence and other information, methods of destruction may include mechanical destruction of the entire unit, or destruction of the replaceable memory circuits or card so that the device can be redeployed with a new memory component. (iii) Employing more than one method Organizations may wish to employ more than one method of destruction to ensure personal information cannot be reconstructed. For example, an organization may wish to go beyond shredding and ensure that pulverization or incineration of the records takes place in the case of paper records, or the physical destruction of degaussed or sanitized electronic media. (iv) Organizational control Organizations should take into consideration whether media will one day not be under their organization’s control when determining which method of destruction should be chosen. For example, an organization wishing to return a hard drive for warranty purposes may wish to employ secure erase. (v) Recycling does not equal secure disposal When it comes to the disposal of personal information, recycling documents is not an acceptable option for secure destruction. In the recycling process, paper may be stored in warehouses for lengthy periods of time until enough has accumulated, and then may be sold while still intact. Remember, recycling does not equal secure destruction. D. Document the Destruction Process Documenting the destruction will assist in creating an audit trail for monitoring compliance with the organization’s secure destruction policy. (i) Authorization to destroy Organizations should include in their secure destruction policies a provision that employees must obtain internal authorizations prior to the destruction of personal information. An organization may develop a process to authorize batches of records or media on a single authorization. The authorization should include a signature field for

RkJQdWJsaXNoZXIy MTgwMjYzOA==