Office of the Saskatchewan Information and Privacy Commissioner. Guide to LA FOIP, Chapter 6, Protection of Privacy. Updated 27 February 2023. 127 An information management service provider (or IMSP) means a person or body that performs one or more of the functions or provides one or more of the following services to a local authority: • Processes, stores, archives, or destroys records containing personal information (e.g., Crown Shred & Recycling) • Provides information management or information technology services with respect to records containing personal information (e.g., Government of Saskatchewan Information Technology Services Branch, SaskBuilds and Procurement IT Division, private companies offering case file management services)350 An information management service provider might also do the following on behalf of a local authority: • Combine records (e.g., merging or deleting duplicate records) • Provide consulting services351 Subsection 23.2(2) Information management service provider 23.2(2) Before disclosing personal information to an information management service provider, a local authority shall enter into a written agreement with the information management service provider that: (a) governs the access to and use, disclosure, storage, archiving, modification and destruction of the personal information; (b) provides for the protection of the personal information; and (c) meets the requirements of this Act and the regulations. 350 The Local Authority Freedom of Information and Protection of Privacy Act, SS 1990-91, c L-27.1 at subsection 2(e.1). 351 Government of Alberta, Health Information Act, Guidelines and Practices Manual, March 2011 at p. 164. Available at https://open.alberta.ca/dataset/50877846-0fba-4dbb-a99feeb651533bc4/resource/3e16d527-2618-48ae-80b8-93f69973878e/download/hia-guidelinespractices-manual.pdf. Accessed June 23, 2020.
RkJQdWJsaXNoZXIy MTgwMjYzOA==