Saskatchewan
Saskatchewan HIPA
Applies to: Trustees of personal health information in Saskatchewan (the Act's word for health custodians).
The Health Information Protection Act does not say where personal health information must be stored. A trustee may give it to an "information management service provider" to "process, store, archive or destroy" it for the trustee, or to provide information management or information technology services (s. 18(1)).
Before it does, the trustee must enter into a written agreement that governs access, use, disclosure and storage, provides for protection of the information, and meets the requirements of the regulations (s. 18(2), in force since 2023-08-01). The provider may use the information only for those purposes (s. 18(3)).
What to check in a listing
- Will the vendor sign a service provider agreement that meets Saskatchewan's regulations?
- Where is the data stored and accessed from? (Storage, and Support and backups): the Act leaves that to the agreement.
The law and the regulator
- The Health Information Protection Act (SS 1999, c. H-0.021), as amended to 2024, c. 4 · checked 2026-10-14
A summary, not legal advice. Laws change; report a correction.