Office of the Saskatchewan Information and Privacy Commissioner. Guide to LA FOIP, Chapter 6, Protection of Privacy. Updated 27 February 2023. 292 RIM Best Practices730 The following RIM practices are commonly accepted best practices but are not exhaustive. The intention of this section is to provide local authorities with a high-level overview, rather than a detailed description of how to implement different RIM practices. It must also be noted that no single approach will be appropriate for every local authority. Some of these practices will need to be modified to meet specific needs, and some may not be appropriate at all. The IPC recommends that you work closely with your RIM staff in the development of practices that meet your organization’s unique needs and situation. If your organization does not have dedicated RIM staff, consider designating a team or engaging with external consultants to investigate these options and develop an implementation plan. 1. Review and understand your organization’s requirements It is important to fully understand the recordkeeping rules that currently apply to your organization. Local authorities should ensure they consider any legislative requirements, policies or procedures related to records management or retention. Implementing records retention schedules, policies and procedures are important to ensure the access to information and privacy rights of individuals are met. In consultation with your legal and RIM staff, review all existing requirements and how they have been implemented within your organization before considering new plans and RIM activities. 2. Develop safeguards The information maintained within records will vary significantly, and as a result, not all records will require the same degree of protection. For example, personal information or personal health information must be protected from any unauthorized collection, use or disclosure. As a result of the requirements to protect personal information and personal health information, records that contain such information may require greater safeguards than others. 730 The remainder of this section originates from SK OIPC resource, Improving Access and Privacy with Records and Information Management. Available at improving-access-privacy-rim.pdf (oipc.sk.ca). Accessed December 17, 2022.
RkJQdWJsaXNoZXIy MTgwMjYzOA==