Office of the Saskatchewan Information and Privacy Commissioner. Guidelines for Professional Regulatory Bodies. Updated February 2024. 9 2) For the personal information that remains in the discipline related document, such as the personal information of the professional member, the professional regulatory body should ensure it has the authority under the applicable access and privacy law to disclose personal information contained within the discipline related document. 3) That it has appropriate safeguards in place to enhance privacy but still promote accountability and transparency. See below for additional notes. Safeguards to Enhance Privacy but Still Promotes Transparency and Accountability Policies and Procedures Professional regulatory bodies should consider designating a specific person responsible for their compliance with access and privacy legislation, the development of appropriate privacy policies and procedures and providing training staff and discipline committee members. Professional regulatory bodies should have written policies and procedures to guide its staff in drafting and publishing discipline decisions. First, policies and procedures should guide staff to only include the necessary personal information (or personal health information) that was needed to arrive at the decision and to remove non-relevant information. Policies and procedures should also guide staff to de-identify personal information (or personal health information) as much as possible, especially if the information belongs to a person who is not the member receiving discipline (this includes witnesses, complainants and affected individuals). De-identification methods can include redacting identifiable information or replacing names (and other identifiable information) with pseudonyms. Written policies and procedures should guide staff on how to determine that the discipline related documents contain only the personal information they have authority to disclose. If the personal information of affected individuals remained in the discipline related document that will be published on the internet, the professional regulatory body should allow the affected individuals to make an argument as to why their personal information should be removed prior to publication.
RkJQdWJsaXNoZXIy MTgwMjYzOA==