3 Office of the Saskatchewan Information and Privacy Commissioner. Guide to Faxing: Preventing Breaches with Safeguards and Responding to a Privacy Breach. 5 Feb. 2026. • Out-of-date contact information - Public bodies or trustees may rely on preprogramed fax numbers from directories or electronic health records that are not kept updated. By not keeping these current, a fax can be directed to an incorrect location. Note for trustees: even if a misdirected fax is received by another trustee (e.g., a physician) who is not the intended recipient or who does not have a need-to-know, it still qualifies as a privacy breach. What is Personal Information and Personal Health Information? Personal information is defined at section 23(1) of LA FOIP and at section 24(1) of FOIP, though the lists provided are not exhaustive. Personal information is information that is: • About an identifiable individual, meaning the individual is capable of being identified from the information (e.g., direct identifiers such as their name or address are given). • Personal in nature. Information can be personal information even if, in the absence of a name or other direct identifier, a person can reasonably be identified by the data elements. Personal health information is defined at section 2(1)(m) of HIPA, and includes: • Information with respect to the physical or mental health of an individual. • Information with respect to any health service provided to an individual. • Information regarding the donation by an individual of any bodily part or bodily substance or information derived from the testing or examination of a bodily part or substance (e.g., x-ray, lab-test results). • Information that is collected in the course of providing health services to an individual, or incidentally to the provision of health services to the individual. • Registration information.3 3 “Registration information” in HIPA means information collected about an individual that is collected for the purpose of registering the individual for a health service and includes their health services number (HSN) and any other number assigned to the individual aspart of a system or unique identifying numbers prescribed in HIPA Regulations. It can include tombstone information that is collected when registering an individual for a health service, such as your address and phone number.
RkJQdWJsaXNoZXIy MTgwMjYzOA==