Saskatchewan's Information and Privacy Commissioner, Grace Hession David, has released her second annual report since her appointment in May 2025, warning of a 'wholesale erosion of personal privacy' without strong regulatory laws. The report, dated June 25, highlights concerns over artificial intelligence (AI) and a 'zero tolerance' policy for privacy breaches.
Record Number of Files Opened
The Office of the Information and Privacy Commissioner (OIPC) opened 433 files for the 2025-2026 fiscal year, the highest in the office's history. Of those, 57 per cent involved reviews of exemptions under access to information laws, while 30 per cent were investigations into privacy breaches.
According to the report, the OIPC has adopted a 'zero tolerance' policy toward 'willful violation of privacy,' naming those who intentionally breach privacy. Recently, Regina Police Service Const. Clinton Duquette was named in an investigation and now faces a non-criminal charge under The Local Authority Freedom of Information and Protection of Privacy Act (LAFOIP) for allegedly snooping on private information in police databases.
AI and Privacy Concerns
The report expresses concern over the growth of AI and a 'lack of privacy safeguards' associated with the technology. While acknowledging positive advancements, it notes that AI presents issues in transparency and accountability, particularly from services 'originate from sources outside our sovereign borders.'
'We are especially concerned with the privacy threat posed to young and vulnerable children who cannot possibly understand the digital footprint they leave online,' the report states. 'We are facing a wholesale erosion of personal privacy unless strong regulatory laws can be brought into place.'
Commissioner's Message
In a section titled 'Commissioner's Message,' the report outlines the OIPC's role as an independent oversight body of the Saskatchewan Legislative Assembly, ensuring compliance with access to information and privacy laws. The commissioner emphasized the need for robust laws to protect personal privacy in the face of emerging technologies.
