Office of the Saskatchewan Information and Privacy Commissioner. Guide to LA FOIP, Chapter 6, Protection of Privacy. Updated 27 February 2023. 282 1. The individual has made a written complaint to the local authority. Local authorities must have the opportunity to address an individual’s privacy concerns first. It is only after this has occurred, and the individual is still not satisfied, that the IPC can investigate. 2. The local authority has responded (provide 30 days for a response). The IPC considers it reasonable to allow a local authority 30 days to respond to a privacy complaint. If an individual does not receive a response, it should follow up with the local authority. 3. Once a response is received from the local authority, if the individual is still not satisfied with how their concerns were handled, the individual can request the Commissioner investigate. The Commissioner cannot levy fines. The Commissioner’s objective in an investigation is to assist local authorities with ensuring its policies and practices are compliant with LA FOIP. Outcomes of investigations where a privacy breach is found to have occurred generally, result in recommendations that policies and/or procedures be amended and/or individuals receive apologies for the breach. To proceed, the Commissioner needs sufficient information and evidence that a breach of privacy may have occurred. When making the complaint, the following should be provided to the IPC: 1. A written complaint to the Commissioner: a. include details of the alleged breach; and b. attach any evidence that supports the complaint. 2. A copy of the response from the local authority. For more on the role and authorities of the Commissioner see, Guide to LA FOIP, Chapter 2: “Administration of LA FOIP”, Information and Privacy Commissioner – Roles & Responsibilities. For more on the IPC process for an investigation, see The Rules of Procedure.
RkJQdWJsaXNoZXIy MTgwMjYzOA==