Privacy commissioner raps B.C. for massive privacy protection failure

VICTORIA -- British Columbia's Education Ministry lost personal information pertaining to 3.4 million students when staff breached security policies and misplaced a hard drive with data stretching back 30 years, an investigation has revealed.

See Full Article

Privacy commissioner Elizabeth Denham said in a report released Thursday that the ministry did not secure a portable hard drive when the information was transferred from computer servers in an effort to save on storage costs.

A series of actions put the information at risk, assistant commissioner Jay Fedorak said.

"The policies were good and it appeared that the employees were aware of the policies," he said in an interview. "They just didn't follow them."

"Policy is important, but policy alone isn't enough," Fedorak said. "It's important that there be adequate and effective training of staff and some compliance auditing or follow-up."

The lost information collected between 1986 and 2009 was mostly associated with students in British Columbia and Yukon.

It included names, addresses, dates of birth, gender, grades, schools, personal education numbers, graduation status, financial aid data and designations such as ESL or special needs.

A smaller number of records included more sensitive information, such as teacher retirement plans, education outcomes for student cancer survivors, health and behaviour issues and children in care.

The ministry discovered the drive missing last August, when a team of up to 50 bureaucrats began searching, to no avail. The Office of the Information and Privacy Commission was notified in September.

"They satisfied us they had looked in every box, in every desk, in every drawer, and they weren't able to find it," Fedorak said.

Investigators said the device could have been missing for as long as five years. After moving information off the server, staff failed to encrypt the device. Then they transferred it to a warehouse that wasn't equipped to secure information or keep track of devices for retrieval.

Denham made nine recommendations to strengthen the security of personal information, including encrypting all mobile data storage devices and maintaining accurate inventories of personal information.

"If this was actually a situation involving a cash loss of $3.4 million, I believe the government would take rapid, dramatic and decisive action to deal with the situation," she said in her report.

Education Minister Mike Bernier acknowledged the privacy breach as "unacceptable" and described the commissioner's assessment and recommendations as "fair and balanced."

"We sincerely apologize for any inconvenience this incident may have caused people," he said in a statement.

Bernier also said the government must do a better job of ensuring that public servants receive ongoing training. He said a formal review of the ministry's personal information management practices is underway.

Enhanced privacy policies will be introduced in the coming weeks, he said.

But Opposition New Democrat education critic Rob Fleming said he's not convinced the government's actions will fix deeply rooted privacy problems. He pointed to other breaches that have occurred in the health and forests ministries.

"(This is) bad decision making in a crisis-like environment, I think, created by B.C. Liberals cuts in the Ministry of Education and elsewhere."

The commission will follow up in three months to determine the extent to which the ministry has implemented the recommendations. It will also conduct an audit of privacy training.



Advertisements

Latest Canada & World News

  • Trump provides written answers to Mueller questions

    World News CBC News
    U.S. President Donald Trump has provided the special counsel's office with written answers to questions about his knowledge of Russian interference in the 2016 election, his lawyers said Tuesday, marking the first time Trump has directly cooperated with the investigation. Source
  • Survey finds 4 in 10 users had driven after consuming marijuana

    Canada News CTV News
    OTTAWA -- Almost two-thirds of Canadians who have smoked pot know they shouldn't drive after doing so but a lot of them are doing it anyway, a new survey suggests. Results of the second annual Canadian cannabis survey released this week found six in 10 people who admitted to using pot in the previous year believed doing so affects a driver's ability to drive. Source
  • Freeland says Khashoggi case not closed; Trump says facts may never be known

    World News CTV News
    OTTAWA -- Canada will use the upcoming G20 summit to push for answers in the murder of journalist Jamal Khashoggi in the Saudi Arabian consulate in Istanbul, Foreign Affairs Minister Chrystia Freeland says. Freeland said Tuesday Canada considers his murder to be very much an open case, a contrast to a statement by U.S. Source
  • Genital mutilation charges dismissed in Detroit-area case

    World News CTV News
    DETROIT -- A federal judge in Detroit says regulating female genital mutilation is up to states and that Congress had no authority to pass the 1996 law banning it. U.S. District Judge Bernard Friedman dismissed mutilation and conspiracy charges Tuesday against two doctors and others involved in the procedure on nine girls at a suburban Detroit clinic. Source
  • U.S. Congress to probe Ivanka Trump's private email use

    World News CTV News
    WASHINGTON -- New revelations about the extent of Ivanka Trump's personal email use in the White House will be getting a hard look from House Democrats when they take power in January. The House Oversight and Government Reform committee began looking into private email use last year after reports by Politico revealed that Ivanka Trump's husband, Jared Kushner, and other White House officials had been using private email for government purposes in possible violation of the Presidential Records…
  • Speeding cop convicted in death of Quebec boy sentenced to 8 months

    Canada News CTV News
    A Quebec provincial police officer has been sentenced to eight months in jail and given a 20-month driving suspension after he smashed into a car while travelling more than double the speed limit, resulting in the death of a five-year-old boy. Source
  • Saskatchewan changes the name of Killsquaw Lake to honour Indigenous women

    Canada News CTV News
    REGINA -- The Saskatchewan government has changed the derogatory name of several lakes to one that celebrates Indigenous women instead. The group of lakes near the town of Unity in the western part of the province was previously known as Killsquaw Lake. Source
  • Former head of Michigan State University charged with lying in Larry Nassar investigation

    World News CBC News
    Former Michigan State University president Lou Anna Simon has been charged with lying to police conducting an investigation of Larry Nassar's sexual abuse. Simon, who stepped down earlier this year over the scandal, was charged Tuesday with two felonies and two misdemeanours. Source
  • Two key officials at B.C. legislature on leave amid criminal probe

    Canada News CTV News
    VICTORIA -- Two key officials at British Columbia's legislature have been placed on indefinite leave over what an official says is a criminal investigation. NDP House Leader Mike Farnworth introduced a motion at the end of question period on Tuesday that said both clerk Craig James and sergeant-at-arms Gary Lenz were being placed on administrative leave pending an investigation. Source
  • RCMP tightens online posting rules after misleading message on guns

    Canada News CBC News
    The RCMP has improved its internal approval process for online postings after sending out a potentially misleading message on firearms earlier this year, a House of Commons committee heard this week. The procedure and house affairs committee has been hearing testimony about whether an RCMP post about Bill C-71 was in contempt of Parliament for treating the Liberals' firearms bill as law when it's still twisting its way through the Senate. Source