Regina Open Data Privacy Bylaw Guidance

Regina, Saskatchewan publishes datasets to support transparency and innovation, but municipal data releases remain bound by provincial access and privacy rules. This guide explains how city programs should assess privacy risk, document decisions, and follow complaint and appeal routes when publishing open data. It covers legal basis, typical enforcement outcomes, the city application process for access requests, and practical action steps for bylaw officers, planners, IT staff and third-party publishers.

Penalties & Enforcement

The primary legal framework for municipal privacy obligations in Saskatchewan is the Local Authority Freedom of Information and Protection of Privacy Act (LAFOIP). Municipal staff and contractors who publish or disclose personal information must follow LAFOIP requirements for collection, use and disclosure of personal data.LAFOIP^[1]

• Fines/monetary penalties: not specified on the cited page.
• Non-monetary orders: the Information and Privacy Commissioner can issue orders to withhold, redact or remove improperly disclosed records.
• Escalation: first vs repeat or continuing offences are not enumerated with fixed fine ranges on the cited LAFOIP summary; consequences focus on orders and compliance requirements.
• Enforcer and complaint pathway: complaints about municipal privacy practices may be filed with the Saskatchewan Information and Privacy Commissioner; the Commissioner handles reviews, recommendations and orders.OIPC complaint^[3]
• Municipal oversight: the City Clerk/Access to Information office administers requests and coordinates responses with departments and legal counsel.

Applications & Forms

To request records or to submit an access or correction request, use the City of Regina Access to Information request process and form published by the City Clerk; specific fees, submission addresses and the official form are available from the City Clerk's access pages.City Clerk Access to Information^[2]

Common Violations and Typical Remedies

• Publishing datasets containing personal identifiers without de-identification — remedy: takedown, redaction and procedural review.
• Insufficient privacy impact assessment for high-risk releases — remedy: suspension of release and mandated PIA.
• Failure to respond to access requests within statutory timeframes — remedy: review and possible order from the Commissioner.

FAQ

Who enforces privacy for Regina's open data?

The Saskatchewan Information and Privacy Commissioner oversees LAFOIP compliance; the City Clerk administers local access and coordination.

Are there fixed fines for privacy breaches?

Specific monetary fines are not specified on the LAFOIP summary page; enforcement commonly involves orders, redaction requirements and corrective directions.

How do I report a suspected improper disclosure?

Report to the City Clerk's Access to Information office first; escalate to the Provincial Information and Privacy Commissioner if unresolved.

How-To

1. Identify whether a dataset contains personal information; consult the city legal or privacy officer.
2. Conduct a privacy impact assessment for datasets with re-identification risk and document mitigation steps.
3. Apply technical de-identification or aggregation and maintain a data release record.
4. Publish with metadata describing limitations, data owner, and a contact for access or correction requests.

Key Takeaways

• LAFOIP governs municipal handling of personal information in Saskatchewan.
• Use PIAs and redaction before publishing high-risk datasets.
• Contact the City Clerk for access requests and the OIPC for unresolved complaints.

Help and Support / Resources

• City of Regina Open Data Portal
• City of Regina - By-law Enforcement
• City Clerk - Access to Information

1. [1] Saskatchewan - LAFOIP overview
2. [2] City of Regina - Access to Information
3. [3] Office of the Information and Privacy Commissioner - Make a privacy complaint