Regina Data Breach Reporting - City Bylaw Guide

Technology and Data Saskatchewan 3 Minutes Read · published May 24, 2026 Flag of Saskatchewan

Regina, Saskatchewan residents and staff should report any suspected city data breach to the City of Regina as soon as possible to reduce harm and preserve evidence. A suspected breach can include unauthorized access, disclosure, loss, or theft of municipal records containing personal information. Start by containing the incident, documenting what happened, and notifying the City’s access and privacy contact listed on the City of Regina website Access to Information & Privacy[1]. If personal information of many people is affected or sensitive categories are exposed, also consider notifying the provincial Information and Privacy Commissioner and following provincial FOIP guidance.

Act quickly to contain systems and preserve logs and evidence.

Legal framework and who enforces it

The City of Regina administers municipal records and access matters at the municipal level while privacy oversight for public bodies in Saskatchewan is provided under provincial access and privacy legislation. For incidents involving City-controlled records, the City’s Access and Privacy Coordinator or Office of the City Clerk is the primary contact for investigations and internal remedial action. Provincial oversight, complaint intake, and broader privacy guidance are handled by the Information and Privacy Commissioner of Saskatchewan as outlined on provincial resources.

Penalties & Enforcement

Official municipal pages consulted do not list specific monetary fines or fixed penalty amounts for data breaches; such amounts are not specified on the cited page. Enforcement and remedies for privacy breaches affecting municipal records may include administrative orders, directives to secure or return information, requirements to notify affected individuals, corrective action plans, and referral to provincial authorities for review.

  • Fine amounts: not specified on the cited page.
  • Escalation: first, repeat, or continuing offences and graduated fines are not specified on the cited page.
  • Non-monetary sanctions: orders, remedial directions, records restrictions, and referrals to provincial oversight are possible remedies.
  • Enforcer: City of Regina Access and Privacy Coordinator or Office of the City Clerk handles municipal enforcement and intake.
  • Inspection and complaint pathways: complaints can be submitted to the City for internal review and to the Information and Privacy Commissioner of Saskatchewan for oversight.
  • Appeals and reviews: where applicable, matters may be appealed or reviewed by the provincial Information and Privacy Commissioner; specific statutory time limits for appeals are not specified on the cited page.
If the City page does not list fines or time limits, the provincial process may determine remedies.

Applications & Forms

The City’s access and privacy page describes contact and reporting procedures but does not publish a specific municipal "data breach" form on the cited page; where forms exist for access or privacy requests, they are provided via the City’s Access to Information & Privacy resource or by contacting the Office of the City Clerk. Fees, submission instructions, or deadlines for a municipal breach report are not specified on the cited page.

Immediate action steps

  • Isolate affected systems and accounts to stop further access.
  • Document affected records, time window, and potential exposed fields (names, financial, health, identifiers).
  • Notify the City of Regina Access and Privacy contact for intake and instructions.
  • Preserve logs, backups, and chain-of-custody for evidence; prepare an incident summary for investigators.
  • Assess whether notification to affected individuals is required and follow any provincial guidance on content and timing.

How-To

  1. Contain the incident: disconnect compromised accounts and secure systems.
  2. Record details: time, systems, scope, and potential data types exposed.
  3. Report to the City’s Access and Privacy contact via the City of Regina Access to Information & Privacy page and follow their instructions.[1]
  4. Prepare notifications to affected individuals as advised and keep records of communications.
  5. If advised or where required, file a complaint or notification with the Information and Privacy Commissioner of Saskatchewan using provincial guidance.

FAQ

Who do I contact first about a suspected city data breach?
Contact the City of Regina Access and Privacy office through the City’s Access to Information & Privacy web page and follow the reported intake process.
Does the City publish a breach-reporting form?
The City’s Access to Information & Privacy page provides contact and intake directions; a specific municipal breach form is not published on the cited page.
Can I appeal the City’s decision about a privacy complaint?
Yes, where applicable appeals or reviews may be made to the provincial Information and Privacy Commissioner; specific time limits are not specified on the cited page.

Key Takeaways

  • Report suspected breaches promptly to minimize harm and preserve evidence.
  • The City of Regina’s Access and Privacy office is the primary municipal contact.
  • Provincial oversight and appeals are handled by the Information and Privacy Commissioner of Saskatchewan.

Help and Support / Resources

  1. [1] City of Regina — Access to Information & Privacy

Categories

General Governance and Administration Public Safety Public Health and Welfare Land Use and Zoning Housing and Building Standards Transportation Environmental Protection Parks and Public Spaces Business and Consumer Protection Taxation and Finance Labor and Employment Education Civil Rights and Equity Elections and Campaign Finance Events and Special Uses Signs and Advertising Utilities and Infrastructure Technology and Data