26 Office of the Saskatchewan Information and Privacy Commissioner. The Rules of Procedure. Effective 1 Dec. 2018. Updated 16 Aug. 2023. (a) The notice of privacy breach sent to affected individuals and consider whether it contains the following: • A description of what happened including the date, time, location and who was involved. • A detailed description of the personal health information that was involved. • If known, a description of possible types of harm that may come to them as a result of the privacy breach. • Steps that can be taken to mitigate harm. • Steps the trustee is taking to prevent the occurrence of similar privacy breaches in the future. • The contact information of an individual within the trustee who can answer questions and provide further information regarding the breach. • A reference to the fact that individuals have a right to complain to the commissioner’s office. • The contact information of the commissioner’s office. • Where appropriate, recognition of the impacts of the privacy breach on affected individuals and an apology. (b) The Privacy Breach Investigation Questionnaire for trustees and consider whether the trustee has: • Contained the breach (as soon as possible). • Notified affected individuals (as soon as possible). • Investigated the breach. • Taken appropriate steps to prevent future breaches. 5-6 Closing of File Without a Report After investigating the reported privacy breach and the actions taken by the trustee: (a) If the commissioner’s office is satisfied with most or all of the steps taken, the file will be closed, and if applicable, with suggested recommendations to the trustee. (b) If the commissioner’s office is not satisfied with the steps taken, a person has filed a complaint with the commissioner’s office, a privacy breach is egregious, there is a systemic issue involved, there is significant educational value or where it involves a large number of affected individuals, the commissioner may direct that a report will be issued. 5-7 Issuing a Report If the commissioner’s office determines that a report will be issued, the process for issuing a report in Part 7 will be followed.
RkJQdWJsaXNoZXIy MTgwMjYzOA==