Privacy

The overall responsibility for privacy in Saskatchewan executive government departments lies with the Access and Privacy Branch of Saskatchewan Justice. In addition, the Information and Privacy Commissioner, who is an independent officer of the Saskatchewan Legislative Assembly, oversees public issues related to freedom of information and privacy. However, the ITO continues to play a key role in the development and enforcing of privacy policies within government ministries and agencies.

In 2002, the ITO contracted Deloitte & Touche to do an assessment of the government's privacy practices and made a commitment to instituting all of its major recommendations. That includes adopting privacy principles for government. These 11 principles are:

Accountability — Each Government of Saskatchewan ministry or agency is responsible for personal information under its control.

Purpose — The purpose, for which personal information is collected, shall be identified at or before the time the information is collected.

Limiting Consent — Obtaining consent from the individual is the expected approach for the collection, use, and disclosure of personal information, but it is not always feasible, appropriate, or the only legal means of authority.

Collection — The collection of personal information shall be limited to that which is necessary for the purposes being supported.

Use and Disclosure — Personal information shall be used or disclosed only for the purposes for which it was collected or for a use consistent with that purpose, except with the consent of the individual or as specifically authorized by law.

Retention — Personal information should be retained only as long as necessary for the fulfillment of its stated collection purpose, or as specified by law.

Accuracy — Personal information shall be as accurate, complete, and up-to-date as is reasonably necessary for the purposes for which it is to be used.

Safeguards — Appropriate security safeguards shall protect personal information.

Openness — The privacy principles, and the policies and procedures relating to their implementation should be readily available.

Access — Upon request, an individual shall be given access to their personal information. An individual shall be able to challenge the accuracy and completeness of the information and have it amended as appropriate.

Compliance — An individual may challenge a ministry or agency's compliance with these principles by contacting one of the responsible officials identified under the first principle.