Saskatchewan · HIPA

Health-record access and privacy for Saskatchewan trustees

AccessPoint manages HIPA access and amendment requests, the trustee duty to protect, breach assessment, and privacy impact assessments — pre-configured for Saskatchewan and running inside your own Microsoft 365 tenant.

Start Free Trial Request a Demo

Saskatchewan — HIPA at a glance

Access deadline
Within 30 days to respond to a request for one's own record (s. 36), extendable by up to 30 days
Amendment
Trustees respond to an amendment request within 30 days; a refused amendment carries a notation on the record (s. 40)
Access fees
A reasonable, cost-recovery fee; no dollar amount is set in the Act or regulations (s. 39)
Breach handling
HIPA imposes a mandatory duty to protect personal health information (s. 16); the Commissioner recommends notifying affected individuals and the IPC as best practice
Oversight
Office of the Saskatchewan Information and Privacy Commissioner (recommendations, not binding orders)
Languages
English

Built for Saskatchewan — HIPA

One platform for the whole access-and-privacy mandate, pre-configured for this regime and running in your own Microsoft 365 tenant.

HIPA access and amendment

Intake to disclosure on Saskatchewan's 30-day clock — access to a patient's own trustee-held record, amendment requests with a notation where refused, the HIPA rules, and defensible records, all on Microsoft 365.

The trustee duty to protect

Meet HIPA's mandatory safeguards duty (s. 16) — administrative, technical, and physical protection for personal health information — with a hash-chained audit trail behind every access and disclosure.

Breach assessment and notification

Log a breach, assess the harm, and produce best-practice notifications to affected individuals and the Commissioner on the timeline you set — so you are ready even though HIPA does not yet mandate reporting.

Consent and disclosure

Track the consents and disclosure directives that govern when a trustee may share personal health information, with an auditable record of every decision.

Privacy programs and PIAs

Meet the 2023 regulations' privacy-program, training, and information-management-service-provider requirements, and run a PIA before a new collection, use, or system goes live.

In your own Saskatchewan tenant

Every request, assessment, and record stays inside your own Microsoft 365 and Azure tenant — no third-party cloud, no cross-border transfers, no per-user fees.

The recommendation model

Saskatchewan's Commissioner recommends — so your record has to stand on its own. AccessPoint builds it.

The Saskatchewan Information and Privacy Commissioner oversees HIPA but does not issue binding orders. After a review the Commissioner sets out recommendations in a report; the trustee then decides whether to follow them, and an applicant who disagrees can appeal to the Court of King's Bench, which decides the matter afresh and can make any order it considers appropriate. HIPA also imposes a mandatory duty to protect personal health information, and the 2023 regulations added privacy-program, training, and service-provider requirements. That makes a complete, defensible record decisive. AccessPoint runs access and amendment on the 30-day clock, assesses breaches, and captures every decision on a hash-chained audit trail — in your own tenant.

30-day access The patient's-own-record clock, tracked for every access and amendment.
Duty to protect HIPA's mandatory safeguards, evidenced with the 2023 privacy-program requirements.
Audit-ready evidence A hash-chained ledger behind every access, amendment, and disclosure.

Configured out of the box

Installing the ca-sk-hipa configuration pack seeds your tenant with everything this regime needs — a starting point you can adjust, not a lock-in.

Related guide: FOI Workflow Quick Check
  • HIPA as the legal-authority and citation spine, with FOIP and LA FOIP shipped as separate configurations
  • Saskatchewan statutory-holiday calendar and 30-day due-date rules
  • Access and amendment grounds mapped to HIPA, with the notation workflow for refused amendments
  • The trustee duty-to-protect safeguards and the 2023 privacy-program, training, and retention requirements
  • Information-management-service-provider (IMSP) agreement tracking under the 2023 regulations
  • Breach assessment workflow with best-practice notification to individuals and the Commissioner
  • Reasonable cost-recovery fee categories for patient record requests
  • Commissioner review grounds, recommendations, and Court of King's Bench appeal tracking

Saskatchewan — HIPA Questions

How long does a Saskatchewan trustee have to respond to an access request?
Under HIPA, a trustee must respond within 30 days to a request for access to the individual's own personal health information, with an extension of up to 30 days in defined circumstances. AccessPoint computes the due date on Saskatchewan's calendar and tracks every request against it.

Does Saskatchewan's Commissioner make binding orders?
No. The Saskatchewan Information and Privacy Commissioner issues recommendations rather than binding orders. After a review, the trustee decides whether to follow them, and an applicant may appeal to the Court of King's Bench, which decides the matter afresh. AccessPoint keeps the investigation record and representations complete so your position is defensible.

Does HIPA require breaches to be reported?
HIPA imposes a mandatory duty to protect personal health information, but it does not yet require breaches to be reported to affected individuals or the Commissioner — the Commissioner recommends notification as best practice. AccessPoint assesses each breach and produces the notifications on the timeline you choose, so you are ready if the law changes.

Where does Saskatchewan health data reside?
Entirely within your own Microsoft 365 and Azure tenant. Requests, records, assessments, and audit history never leave your control — no third-party cloud and no cross-border data transfers.

Run HIPA Access, Breach, and Assessments in One Platform

Try AccessPoint free for 30 days, pre-configured for Saskatchewan. No credit card required.

Start Free Trial