Guide to LA FOIP-Chapter 6

Office of the Saskatchewan Information and Privacy Commissioner. Guide to LA FOIP, Chapter 6, Protection of Privacy. Updated 27 February 2023. 195 Agreements concerning the disclosure of personal information by local authorities to other organizations, including federal, provincial, municipal, or foreign governments or bodies, should contain: • A description of the personal information to be collected or disclosed. • The authority for collecting, using and/or disclosing personal information. • The purposes for which the personal information is collected, used and/or disclosed. • A statement of all the administrative, technical, and physical safeguards required to protect the confidentiality of the personal information, especially with respect to its use and disclosure. • A statement specifying whether information received by a local authority will be subject to the provisions of LA FOIP or, for other jurisdictions where comparable legislation exists, whether that legislation will apply. • A statement that the disclosure of the personal information will cease if the recipient is discovered to be improperly disclosing the information collected from the local authority. • The names, titles, and signatures of the officials in both the supplying and receiving organizations who are responsible for the terms of the agreement, the date of the agreement and the period for which it is in effect.534 Arrangement is a settlement of mutual relations or claims between parties.535 For purposes of this provision, the arrangement must have been made or entered into pursuant to an Act of Saskatchewan or Canada. Arrangements should, whenever possible, be in writing. A verbal arrangement should be the exception. When an arrangement is unwritten, disclosures should be approved at a senior level within the local authority.536 Local authorities should still abide by the data minimization and need-to-know principles when disclosing personal information. Only disclose the least amount of personal information necessary to achieve the purpose. Further, only disclose to those that have a need-to-know 534 Service Alberta, FOIP Guidelines and Practices: 2009 Edition, Chapter 7 at pp. 270 to 271. 535 Government of Manitoba, FIPPA for Public Bodies – Resource Manual, Chapter 6, Protection of Privacy at p. 6-202. Available at Chapter (gov.mb.ca). Accessed December 15, 2022. 536 Service Alberta, FOIP Guidelines and Practices: 2009 Edition, Chapter 4 at p. 271.

RkJQdWJsaXNoZXIy MTgwMjYzOA==