Office of the Saskatchewan Information and Privacy Commissioner. Guide to LA FOIP, Chapter 6, Protection of Privacy. Updated 27 February 2023. 228 (a) for the purposes of protecting the security of the correctional facility or the safety of inmates, staff members or the public; (b) for the purposes of the investigation of or prevention of the commission of an offence; (c) for the purposes of any investigation being conducted pursuant to the Act; or (d) for any purpose for which personal information may be used or disclosed by a government institution pursuant to The Freedom of Information and Protection of Privacy Act. Local authorities should still abide by the data minimization and need-to-know principles when disclosing personal information. Only disclose the least amount of personal information necessary to achieve the purpose. Further, only disclose to those that have a need-to-know the personal information to carry out the purpose. See Need-to-Know and Data Minimization earlier in this Chapter. IPC Findings In Investigation Report 237-2016, the Commissioner investigated an alleged breach of privacy involving the Rural Municipality of Rosthern (RM). The complaint alleged that the RM disclosed an individual’s personal information by posting it in the council’s meeting minutes which then went on the RM’s website. The Commissioner found that the RM had authority to disclose the personal information pursuant to subsection 28(2)(r) of LA FOIP and subsection 117(1)(d) of The Municipalities Act. However, the Commissioner made several recommendations to protect personal information while still making council meeting minutes publicly available. The recommendations included: providing public notice to residents about how personal information can become part of the agenda and published on the website, redact sensitive personal information when distributing information for council meetings, consider closing the meeting when sensitive personal information will be discussed, put the least amount of personal information in the meeting minutes (e.g., remove names, or use initials), and to follow these recommendations before posting minutes to the website.
RkJQdWJsaXNoZXIy MTgwMjYzOA==