Guide to Faxing

9 Office of the Saskatchewan Information and Privacy Commissioner. Guide to Faxing: Preventing Breaches with Safeguards and Responding to a Privacy Breach. 5 Feb. 2026. To proactively report a privacy breach, public bodies and trustees can use the following form – Proactively Reported Breach of Privacy Reporting Form for Public Bodies. For more information, see OIPC’s resource, Privacy Breach Guidelines. What to Expect in an Investigation by OIPC If an affected individual or third party (witness) makes OIPC aware of a privacy breach involving misdirected faxes that warrants further investigation, OIPC will open a file and inform the responsible public body or trustee, in writing, of a formal investigation after early resolution efforts are attempted. In the notice of investigation, OIPC will ask the public body and trustees to complete and return OIPC’s Privacy Breach Investigation Questionnaire (Questionnaire) and provide other relevant material within 30 days (e.g., relevant policies, procedures, work standards).The Questionnaire walks public bodies and trustees through the four best practice steps for responding to a breach (containment, notification, investigation, and prevention). If further information is required at any point in the investigation, OIPC will advise. After concluding the investigation, a public investigation report may be issued. Other helpful resources include OIPC’s: • Privacy Breach Guidelines for Government Institutions and Local Authorities. • Privacy Breach Guidelines for Trustees Attached to this guide are also checklists for recipients of a misdirected fax and public bodies/trustees who send one to use in managing a breach caused by misdirected fax.

RkJQdWJsaXNoZXIy MTgwMjYzOA==