Rules of Procedure

33 Office of the Saskatchewan Information and Privacy Commissioner. The Rules of Procedure. Effective 1 Dec. 2018. Updated 16 Aug. 2023. 7-2 Preliminary Inquiries Before commencing an investigation, the commissioner’s office may make inquiries to determine jurisdiction and to establish if there are sufficient grounds to investigate the possible privacy breach. 7-3 Notice of Investigation After the commissioner’s office determines that there are grounds to investigate, the commissioner’s office will prepare and send to the trustee, complainant, and any other interested person, a notice of investigation indicating that an investigation will be undertaken. 7-4 Notice of Investigation and Questionnaire (1) The notice of investigation will be prepared in accordance with HIPA and may include a request for the following: • Completion of the Privacy Breach Investigation Questionnaire for public bodies. • Any other relevant information that the commissioner considers necessary for a full investigation. (2) The notice of investigation will indicate that all of the items requested in the notice of investigation are to be provided within 30 days after receipt of the notice or any further time directed by the commissioner’s office. 7-5 Investigation of the Complaint and Alleged Breach (1) The commissioner’s office will continue its investigation of the complaint. If any information is missing or clarification is needed, the commissioner’s office will make one request for that information from the trustee and then continue with its investigation. The commissioner’s office will determine whether to request the missing information from the trustee or another organization. (2) In order to avoid delay, the commissioner’s office will request the information by a certain date and if information was not provided by that date or another date directed by the commissioner’s office, the commissioner’s office will proceed with its investigation and analysis. (3) If, during the investigation, the commissioner’s office determines there are other interested persons, the commissioner’s office may provide a copy of the notice of investigation to those interested persons and may request those interested persons to provide information within 14 days after receipt of the notice or any further time directed by the commissioner’s office. 7-6 When Investigating a Complaint of a Breach When investigating a complaint of a possible privacy breach, the commissioner’s office will, among other things, confirm whether or not a privacy breach has occurred.

RkJQdWJsaXNoZXIy MTgwMjYzOA==