Privacy commissioner raps B.C. for massive privacy protection failure

VICTORIA -- British Columbia's Education Ministry lost personal information pertaining to 3.4 million students when staff breached security policies and misplaced a hard drive with data stretching back 30 years, an investigation has revealed.

See Full Article

Privacy commissioner Elizabeth Denham said in a report released Thursday that the ministry did not secure a portable hard drive when the information was transferred from computer servers in an effort to save on storage costs.

A series of actions put the information at risk, assistant commissioner Jay Fedorak said.

"The policies were good and it appeared that the employees were aware of the policies," he said in an interview. "They just didn't follow them."

"Policy is important, but policy alone isn't enough," Fedorak said. "It's important that there be adequate and effective training of staff and some compliance auditing or follow-up."

The lost information collected between 1986 and 2009 was mostly associated with students in British Columbia and Yukon.

It included names, addresses, dates of birth, gender, grades, schools, personal education numbers, graduation status, financial aid data and designations such as ESL or special needs.

A smaller number of records included more sensitive information, such as teacher retirement plans, education outcomes for student cancer survivors, health and behaviour issues and children in care.

The ministry discovered the drive missing last August, when a team of up to 50 bureaucrats began searching, to no avail. The Office of the Information and Privacy Commission was notified in September.

"They satisfied us they had looked in every box, in every desk, in every drawer, and they weren't able to find it," Fedorak said.

Investigators said the device could have been missing for as long as five years. After moving information off the server, staff failed to encrypt the device. Then they transferred it to a warehouse that wasn't equipped to secure information or keep track of devices for retrieval.

Denham made nine recommendations to strengthen the security of personal information, including encrypting all mobile data storage devices and maintaining accurate inventories of personal information.

"If this was actually a situation involving a cash loss of $3.4 million, I believe the government would take rapid, dramatic and decisive action to deal with the situation," she said in her report.

Education Minister Mike Bernier acknowledged the privacy breach as "unacceptable" and described the commissioner's assessment and recommendations as "fair and balanced."

"We sincerely apologize for any inconvenience this incident may have caused people," he said in a statement.

Bernier also said the government must do a better job of ensuring that public servants receive ongoing training. He said a formal review of the ministry's personal information management practices is underway.

Enhanced privacy policies will be introduced in the coming weeks, he said.

But Opposition New Democrat education critic Rob Fleming said he's not convinced the government's actions will fix deeply rooted privacy problems. He pointed to other breaches that have occurred in the health and forests ministries.

"(This is) bad decision making in a crisis-like environment, I think, created by B.C. Liberals cuts in the Ministry of Education and elsewhere."

The commission will follow up in three months to determine the extent to which the ministry has implemented the recommendations. It will also conduct an audit of privacy training.



Advertisements

Latest Canada & World News

  • Musk's lawyer argues British cave diver was not harmed by 'pedo guy' tweet

    World News CTV News
    There is a photo in which Vernon Unsworth is standing next to Theresa May in front of 10 Downing Street, where the former British prime minister gave a hero's welcome to the divers who helped rescue 12 boys and their soccer coach from a flooded cave in Thailand. Source
  • Indian police fatally shoot 4 suspects in gang-rape case

    World News CTV News
    SHADNAGAR, INDIA -- Indian police on Friday fatally shot and killed four men suspected of raping and killing a woman in southern India, leading some to celebrate their deaths as justice in a case that has sparked protests across the country. Source
  • Flesh-eating bacteria linked to heroin kills 7 in California

    World News CTV News
    SAN DIEGO -- A flesh-eating bacteria linked to the use of black tar heroin has killed at least seven people over the past two months in the San Diego area, prompting health authorities to alert law enforcement and other officials in California. Source
  • Wedding planning sites change policies on slave plantations

    World News CTV News
    NEW YORK -- Four major websites used for wedding planning are revising their policies on content referencing former slave plantations, responding to an advocacy group's campaign urging the companies to stop promoting venues where black people were once brutalized. Source
  • Pearl Harbor commemoration to go on after fresh tragedy

    World News CTV News
    HONOLULU -- Officials will beef up security as usual for the ceremony to remember those lost in the attack on Pearl Harbor 78 years ago, with service members and dignitaries confronting a fresh tragedy after a U.S. Source
  • 'A lesson to be learned': Winnipeg woman sharing her Holocaust diaries

    Canada News CTV News
    TORONTO -- The diaries of a young Jewish girl whose parents died in the Holocaust during the Second World War are now part of a display in the Jewish Heritage Centre of Western Canada. For years, only the memories of Holocaust survivor Susan Garfield have been shared with her children and grandchildren. Source
  • 'We are sorry for the pain:' London diocese apologizes for sexual abuse

    Canada News CBC News
    The Roman Catholic Diocese of London, Ont., is apologizing for the pain caused by sexual abuse by priests, after a group of survivors released a list naming their alleged abusers. "We wish to express our utmost regret for the suffering that has been incurred as a result of clergy sexual abuse," the diocese said in a statement Thursday. Source
  • Lead-laced finger puppets seized at Canada-U.S. border

    World News CTV News
    TORONTO -- Nearly 200 toy finger puppets were seized by U.S. border patrol officers, who determined the shipment from Canada contained lead. U.S. border agents at New York state’s Port of Champlain intercepted the toy shipment which was headed to a distribution centre, according to a press release. Source
  • Chase with stolen UPS truck ends with deadly shootout in Florida

    World News CBC News
    Police said there were multiple fatalities Thursday after a UPS driver in Florida was kidnapped by at least two robbery suspects who led police on a two-county chase that ended in gunfire at a busy intersection during rush hour. Source
  • 4 dead after chase with stolen UPS truck ends with shootout in Florida

    World News CBC News
    Police said there were multiple fatalities Thursday after a UPS driver in Florida was kidnapped by at least two robbery suspects who led police on a two-county chase that ended in gunfire at a busy intersection during rush hour. Source