Office of the Saskatchewan Information and Privacy Commissioner. Guide to LA FOIP, Chapter 6, Protection of Privacy. Updated 27 February 2023. 153 responsibilities. See “Use” Involving Contracted Third Parties later in this Chapter. • If the local authority shares the personal information outside of the organization, this is generally a “disclosure”. o “Disclosure” includes sharing personal information with another local authority, as each is considered a separate “local authority” under LA FOIP. Local authorities should still abide by the data minimization and need-to-know principles when using personal information. Only use the least amount of personal information necessary to achieve the purpose. Further, only share internally with those that have a needto-know the personal information to carry out the purpose. See Need-to-Know and Data Minimization earlier in this Chapter. Subsection 27(a) Use of personal information 27 No local authority shall use personal information under its control without the consent, given in the prescribed manner, of the individual to whom the information relates, except: (a) for the purpose for which the information was obtained or compiled, or for a use that is consistent with that purpose; or Subsection 27(a) of LA FOIP allows a local authority to use personal information for purposes consistent with the reason it was collected. Use indicates internal utilization of personal information by a local authority and includes the sharing of the personal information in such a way that it remains under the control of the local authority.432 Purpose means the purpose for which personal information was obtained or compiled, the object to be attained or the thing intended to be done, e.g., the administration of a program, 432 First defined by SK OIPC in 2008-2009 Annual Report at p. 76. First cited in Investigation Report F2009-001 at [78]. Originates from Service Alberta, FOIP Guidelines and Practices: 2009 Edition, Chapter 7, p 261.
RkJQdWJsaXNoZXIy MTgwMjYzOA==