Frank Work, Information and Privacy Commissioner, received a privacy complaint against the Livingstone Range School Division No. 68.
The Complainant expressed concerns regarding the amount of personal information disclosed in a letter issued by a school within the jurisdiction of the School Division.
In order to fulfill the disclosure provisions of the Freedom of Information and Protection of Privacy Act (“the FOIP Act”), the School Division must have authority to disclose personal information under section 40(1) of the FOIP Act and disclose personal information only to the extent necessary as required under section 40(4).
The investigation determined that the disclosure was authorized under section 40(1)(c) of the FOIP Act [disclosure for the purpose for which the information was collected]. The investigation also determined that the disclosure to the staff was in accordance with section 40(4) of the FOIP Act. However, the investigation found that the disclosure to students and parents was more than was necessary. Therefore, the investigation finds that the disclosure to students and parents did not comply with the requirement under section 40(4) of the FOIP Act.