Privacy commissioner raps B.C. for massive privacy protection failure

VICTORIA -- British Columbia's Education Ministry lost personal information pertaining to 3.4 million students when staff breached security policies and misplaced a hard drive with data stretching back 30 years, an investigation has revealed.

See Full Article

Privacy commissioner Elizabeth Denham said in a report released Thursday that the ministry did not secure a portable hard drive when the information was transferred from computer servers in an effort to save on storage costs.

A series of actions put the information at risk, assistant commissioner Jay Fedorak said.

"The policies were good and it appeared that the employees were aware of the policies," he said in an interview. "They just didn't follow them."

"Policy is important, but policy alone isn't enough," Fedorak said. "It's important that there be adequate and effective training of staff and some compliance auditing or follow-up."

The lost information collected between 1986 and 2009 was mostly associated with students in British Columbia and Yukon.

It included names, addresses, dates of birth, gender, grades, schools, personal education numbers, graduation status, financial aid data and designations such as ESL or special needs.

A smaller number of records included more sensitive information, such as teacher retirement plans, education outcomes for student cancer survivors, health and behaviour issues and children in care.

The ministry discovered the drive missing last August, when a team of up to 50 bureaucrats began searching, to no avail. The Office of the Information and Privacy Commission was notified in September.

"They satisfied us they had looked in every box, in every desk, in every drawer, and they weren't able to find it," Fedorak said.

Investigators said the device could have been missing for as long as five years. After moving information off the server, staff failed to encrypt the device. Then they transferred it to a warehouse that wasn't equipped to secure information or keep track of devices for retrieval.

Denham made nine recommendations to strengthen the security of personal information, including encrypting all mobile data storage devices and maintaining accurate inventories of personal information.

"If this was actually a situation involving a cash loss of $3.4 million, I believe the government would take rapid, dramatic and decisive action to deal with the situation," she said in her report.

Education Minister Mike Bernier acknowledged the privacy breach as "unacceptable" and described the commissioner's assessment and recommendations as "fair and balanced."

"We sincerely apologize for any inconvenience this incident may have caused people," he said in a statement.

Bernier also said the government must do a better job of ensuring that public servants receive ongoing training. He said a formal review of the ministry's personal information management practices is underway.

Enhanced privacy policies will be introduced in the coming weeks, he said.

But Opposition New Democrat education critic Rob Fleming said he's not convinced the government's actions will fix deeply rooted privacy problems. He pointed to other breaches that have occurred in the health and forests ministries.

"(This is) bad decision making in a crisis-like environment, I think, created by B.C. Liberals cuts in the Ministry of Education and elsewhere."

The commission will follow up in three months to determine the extent to which the ministry has implemented the recommendations. It will also conduct an audit of privacy training.



Advertisements

Latest Canada & World News

  • Death toll in Egypt attack on Christians rises to 29

    World News CTV News
    CAIRO -- The death toll in the attack by gunmen on a bus transporting Christians to a monastery south of Cairo rose to 29, Egyptian authorities said Saturday. The Egyptian Cabinet said in a news release that 13 victims of Friday's attack remained hospitalized in Cairo and the southern province of Minya where the attack took place. Source
  • U.K. lowers terror threat level to 'severe' as more arrested

    World News CTV News
    MANCHESTER, England -- Britain reduced its terrorism threat level a notch, from "critical" to "severe," as authorities said major progress has been made in unravelling the plot behind the Manchester bombing. Prime Minister Theresa May said "a significant amount of police activity" and several arrests had led to the level being lowered. Source
  • ISIS claims responsibility for deadly shooting on Coptic Christians in Egypt

    World News CBC News
    The group Islamic State in Iraq and Syria (ISIS) said on Saturday that its fighters were responsible for a shooting that killed dozens of Egyptian Christians on Friday, according to a statement from the group. Source
  • U.S. backs call for fight against protectionism in G7 communique

    World News CBC News
    U.S. President Donald Trump has agreed to include a pledge to fight trade protectionism in a final communique due to be released later on Saturday at the end of a summit of Group of Seven leaders, a G7 source said. Source
  • N.S. party leaders stick to familiar scripts in campaign's final days

    Canada News CBC News
    The final Friday of this provincial election campaign was as illustrative as any of what each party leader wants voters thinking about as they prepare to cast their ballots. Liberal Leader Stephen McNeil started his morning at the office of a company that specializes in virtual reality flight simulation. Source
  • 11 arrests total in Manchester bomb investigation

    World News CBC News
    Police arrested two more suspects Saturday over the deadly Manchester concert bombing, as Britons began a sunny holiday long weekend under heightened security. Greater Manchester Police said two men, aged 20 and 22, were detained early Saturday in the northwest England city on suspicion of terrorism offences. Source
  • 5 things to watch for in today's Conservative leadership result

    Canada News CBC News
    After a year of campaigning, it's mostly over but the counting for the 13 candidates in the Conservative leadership race.Listen to CBC Radio's The House: Conservatives make their choiceFollow CBC's live coverage of the Conservative leadership conventionConservative leadership candidates lay out vision for party in final speechesAs the final few votes are cast in person and the tabulation machines set to work Saturday, here's what to watch for when the results are revealed at 5 p.m. Source
  • Mosul siege extends ISIS fight in Iraq, puts civilians at risk

    World News CTV News
    MOSUL, Iraq -- Iraqi forces are steadily closing in on the remaining pockets of territory held by the Islamic State group in Mosul, inching toward a victory that U.S.-led coalition officials say is "only a matter of time. Source
  • Carter national security adviser Zbigniew Brzezinski dies

    World News CTV News
    WASHINGTON -- Zbigniew Brzezinski, who helped topple economic barriers between the Soviet Union, China and the West as President Jimmy Carter's national security adviser, died Friday. He was 89. His death was announced on social media Friday night by his daughter, MSNBC host Mika Brzezinski. Source
  • Man hurling racial slurs kills 2, injures 1 on Portland train: police

    World News CTV News
    PORTLAND, Ore. -- Two people died Friday and another was hurt in a stabbing on a Portland light-rail train after a man yelled racial slurs at two young women who appeared to be Muslim, one of whom was wearing a hijab, police said. Source