Office of the Saskatchewan Information and Privacy Commissioner. MLA Guide to Protecting Personal Information. Effective April 2018. Updated 9 July 2024. 11 (b) enabling the information management service provider to provide the government institution with information management or information technology services; (c) having the information management service provider take possession or control of the personal information; (d) combining records containing personal information; or (e) providing consulting services. Where an MLA office engages an IMSP, it is necessary to enter into a written agreement. Subsections 24.2(2) and (3) provide: 24.2(2) Before disclosing personal information to an information management service provider, a government institution shall enter into a written agreement with the information management service provider that: (a) governs the access to and use, disclosure, storage, archiving, modification and destruction of the personal information; (b) provides for the protection of the personal information; and (c) meets the requirements of this Act and the regulations. (3) An information management service provider shall not obtain access to, use, disclose, process, store, archive, modify or destroy personal information received from a government institution except for the purposes set out in subsection (1). See the IPC’s resource entitled, Best Practice for Information Sharing Agreements. For more on subsection 24.2 of FOIP and the use of IMSPs, see the Guide to FOIP, Chapter 6, “Protection of Privacy” starting at page 118. Retention and Destruction of Personal Information Unlike Ministerial records, there are no statutory requirements for MLAs to transfer records to the Saskatchewan Archives Board, as they are personal property and not subject to The Archives and Public Records Management Act. Therefore, these records may be disposed of as each MLA sees fit. For information on the Provincial Archives of Saskatchewan, see www.saskarchives.com.
RkJQdWJsaXNoZXIy MTgwMjYzOA==