To BCC Or Not To BCC? Additional Recommendations From The Privacy Commissioner Of Saskatchewan

In December 2022, the Office of the Privacy Commissioner of Saskatchewan (IPC) released an Investigation Report following its investigation into an incident where the blind carbon copy (BCC) function was not used when emailing ratepayers, leading to personal email addresses being leaked.

Last year, we discussed a near identical circumstance and associated Investigation Report in To BCC or Not to BCC? That Is the Question. This recent Investigation Report acts as an additional reminder for public bodies to ensure that they are meeting their obligations under The Local Authority Freedom of Information and Protection of Privacy Act (LA FOIP).

Over 200 Email Addresses Leaked

In February, 2022 the hamlet chairperson sent out an email to over 200 email addresses - as the BCC function was not used, all recipients could view the addresses. Following the email, the hamlet chairperson sent a short note requesting that recipients delete the addresses, and apologizing for