Privacy commissioner raps B.C. for massive privacy protection failure

VICTORIA -- British Columbia's Education Ministry lost personal information pertaining to 3.4 million students when staff breached security policies and misplaced a hard drive with data stretching back 30 years, an investigation has revealed.

See Full Article

Privacy commissioner Elizabeth Denham said in a report released Thursday that the ministry did not secure a portable hard drive when the information was transferred from computer servers in an effort to save on storage costs.

A series of actions put the information at risk, assistant commissioner Jay Fedorak said.

"The policies were good and it appeared that the employees were aware of the policies," he said in an interview. "They just didn't follow them."

"Policy is important, but policy alone isn't enough," Fedorak said. "It's important that there be adequate and effective training of staff and some compliance auditing or follow-up."

The lost information collected between 1986 and 2009 was mostly associated with students in British Columbia and Yukon.

It included names, addresses, dates of birth, gender, grades, schools, personal education numbers, graduation status, financial aid data and designations such as ESL or special needs.

A smaller number of records included more sensitive information, such as teacher retirement plans, education outcomes for student cancer survivors, health and behaviour issues and children in care.

The ministry discovered the drive missing last August, when a team of up to 50 bureaucrats began searching, to no avail. The Office of the Information and Privacy Commission was notified in September.

"They satisfied us they had looked in every box, in every desk, in every drawer, and they weren't able to find it," Fedorak said.

Investigators said the device could have been missing for as long as five years. After moving information off the server, staff failed to encrypt the device. Then they transferred it to a warehouse that wasn't equipped to secure information or keep track of devices for retrieval.

Denham made nine recommendations to strengthen the security of personal information, including encrypting all mobile data storage devices and maintaining accurate inventories of personal information.

"If this was actually a situation involving a cash loss of $3.4 million, I believe the government would take rapid, dramatic and decisive action to deal with the situation," she said in her report.

Education Minister Mike Bernier acknowledged the privacy breach as "unacceptable" and described the commissioner's assessment and recommendations as "fair and balanced."

"We sincerely apologize for any inconvenience this incident may have caused people," he said in a statement.

Bernier also said the government must do a better job of ensuring that public servants receive ongoing training. He said a formal review of the ministry's personal information management practices is underway.

Enhanced privacy policies will be introduced in the coming weeks, he said.

But Opposition New Democrat education critic Rob Fleming said he's not convinced the government's actions will fix deeply rooted privacy problems. He pointed to other breaches that have occurred in the health and forests ministries.

"(This is) bad decision making in a crisis-like environment, I think, created by B.C. Liberals cuts in the Ministry of Education and elsewhere."

The commission will follow up in three months to determine the extent to which the ministry has implemented the recommendations. It will also conduct an audit of privacy training.



Advertisements

Latest Canada & World News

  • Trudeau government shelves part of anti-spam law that would allow private lawsuits

    Canada News CBC News
    Prime Minister Justin Trudeau's government is being accused of caving to big business lobbying after it decided to indefinitely freeze application of part of Canada's anti-spam law that would have allowed ordinary Canadians to sue for spam. Source
  • Foonie? As loonie turns 30, it's time to think of a name for a $5 coin: Don Pittis

    Canada News CBC News
    Foonie doesn't really work, so Canadians will have to put on their thinking caps to figure out a name for the $5 coin. As the loonie turns 30 this week, painful though it may be, we must inevitably begin to prepare ourselves to say goodbye to our blue Wilfrids. Source
  • Rare 'bright nights' mystery solved by Canadian scientists

    Canada News CBC News
    It's a phenomenon that's been noted throughout history: bright nights when you could read even though there was no illumination from the moon, candles or any other form of light. Now, Canadian scientists believe they've unravelled the mystery — and there's even a possibility we could see more such nights because of our changing climate. Source
  • Seeing the light: Mining companies look to solar power, wind for fresh revenue

    Canada News CBC News
    After a century of pulling lead and zinc from the Sullivan mine in southeast British Columbia, the energy company Teck recently shut down the operation and began years of restoration work. Some of the land outside the city of Kimberley became a meadow with grass and trees, but it remained tainted after decades of mining activity. Source
  • 'They were very persistent': CBC finds more cash-for-jobs immigration schemes

    Canada News CBC News
    After a CBC iTeam investigation revealed that a Saskatchewan business owner was offered cash in exchange for a job offer to a Chinese national, three other people have come forward to report similar experiences. Last week, CBC reported that Barb Reid, owner of a Fabricland in Prince Albert, had been approached by a representative of a Vancouver-based immigration consulting firm. Source
  • Trump's Supreme Court legacy might be closer than you think: Keith Boag

    World News CBC News
    Not that we needed it, but an avalanche of news from the U.S. Supreme Court has reminded us again that elections have consequences. The top court lifted most of the injunction against the Trump administration's controversial travel ban yesterday, while agreeing to hear arguments later this year about the lawfulness of that executive order. Source
  • Fire that threatened famous national park in Spain 'under control,' official says

    World News CTV News
    MADRID - Spain's interior minister says firefighters have brought under control a wildfire that threatened Donana National Park, a celebrated conservation wetland and home to the endangered Iberian lynx. In a note on his official Twitter account Tuesday, Juan Ignacio Zoido says that roads had been reopened in the area and some 250 soldiers deployed to combat the blaze were returning to base. Source
  • Utah wildfire grows as firefighters face hot, dry conditions

    World News CBC News
    The largest wildfire in the U.S. has forced more than 1,500 people from their homes and cabins in a southern Utah mountain area home to a ski town and popular fishing lake. Firefighters battled high winds as they fought a fire that has grown to 184 square kilometres and burned 13 homes — larger than any other fire in the country now, state emergency managers said. Source
  • Dutch sleuth looks to provide breakthrough in biggest U.S. art heist case

    World News CTV News
    THE HAGUE, Netherlands - A Dutch art sleuth whose search for purloined paintings and sculptures has led to Ukrainian militiamen and Nazi memorabilia collectors has joined the hunt for what he calls the "Holy Grail": A collection worth $500 million that represents the largest art heist in U.S. Source
  • Ruling in travel ban leads to more questions about lawsuits

    World News CTV News
    WASHINGTON - The Supreme Court's decision to partially reinstate U.S. President Donald Trump's temporary travel ban has left the effort to keep some foreigners out of the United States in a murky middle ground, with unanswered questions and possibly more litigation ahead. Source