Office of the Saskatchewan Information and Privacy Commissioner. Use of Drones – Guidelines for Municipal Police Services. Effective 3 Oct. 2023. 3 • What measures can be taken to minimize the impact to personal privacy. • What safeguards should be put in place to properly protect the personal information. • How will access to information requests for video surveillance footage be handled. Is the Duty to Protect being Met Section 23.1 of LA FOIP requires that a local authority have administrative, technical and physical safeguards to protect personal information. Administrative safeguards are controls such as written policies and procedures regarding how personal information is to be managed and protected. In the case of drone footage, examples of administrative safeguards may include where the footage is saved and who can access it and for what purpose, how long the footage is to be retained and when it can be destroyed. Administrative safeguards also include agreements with information management service providers (IMSPs) that manage the footage on behalf of the police service, and audits to ensure the footage is being accessed only on a need-to-know basis. Technical safeguards mean the technology and the policy and procedures that are used to protect personal information and control access to it. Examples include separate user identifications, passwords, firewalls, identification and authentication controls, virus scanners and audit capabilities in digital systems. Physical safeguards are physical measures to protect personal information. They include protecting buildings and equipment from unauthorized intrusion and natural and environmental hazards. Examples include locked filing cabinets, offices and storage rooms, alarm systems and clean desk approaches. What Measures can be Taken to Minimize the Impact to Personal Privacy Collection occurs when an individual’s image is captured by the video surveillance system. Municipal police services who are implementing the use of video surveillance will need to ensure they have proper authority under LA FOIP for collecting the personal information of individuals. Some things public bodies should consider: • In what circumstances and for what purposes will drone technology be used. • Is it possible to use the drone in a way to minimize the likelihood of capturing personal information.
RkJQdWJsaXNoZXIy MTgwMjYzOA==