Privacy commissioner raps B.C. for massive privacy protection failure

VICTORIA -- British Columbia's Education Ministry lost personal information pertaining to 3.4 million students when staff breached security policies and misplaced a hard drive with data stretching back 30 years, an investigation has revealed.

See Full Article

Privacy commissioner Elizabeth Denham said in a report released Thursday that the ministry did not secure a portable hard drive when the information was transferred from computer servers in an effort to save on storage costs.

A series of actions put the information at risk, assistant commissioner Jay Fedorak said.

"The policies were good and it appeared that the employees were aware of the policies," he said in an interview. "They just didn't follow them."

"Policy is important, but policy alone isn't enough," Fedorak said. "It's important that there be adequate and effective training of staff and some compliance auditing or follow-up."

The lost information collected between 1986 and 2009 was mostly associated with students in British Columbia and Yukon.

It included names, addresses, dates of birth, gender, grades, schools, personal education numbers, graduation status, financial aid data and designations such as ESL or special needs.

A smaller number of records included more sensitive information, such as teacher retirement plans, education outcomes for student cancer survivors, health and behaviour issues and children in care.

The ministry discovered the drive missing last August, when a team of up to 50 bureaucrats began searching, to no avail. The Office of the Information and Privacy Commission was notified in September.

"They satisfied us they had looked in every box, in every desk, in every drawer, and they weren't able to find it," Fedorak said.

Investigators said the device could have been missing for as long as five years. After moving information off the server, staff failed to encrypt the device. Then they transferred it to a warehouse that wasn't equipped to secure information or keep track of devices for retrieval.

Denham made nine recommendations to strengthen the security of personal information, including encrypting all mobile data storage devices and maintaining accurate inventories of personal information.

"If this was actually a situation involving a cash loss of $3.4 million, I believe the government would take rapid, dramatic and decisive action to deal with the situation," she said in her report.

Education Minister Mike Bernier acknowledged the privacy breach as "unacceptable" and described the commissioner's assessment and recommendations as "fair and balanced."

"We sincerely apologize for any inconvenience this incident may have caused people," he said in a statement.

Bernier also said the government must do a better job of ensuring that public servants receive ongoing training. He said a formal review of the ministry's personal information management practices is underway.

Enhanced privacy policies will be introduced in the coming weeks, he said.

But Opposition New Democrat education critic Rob Fleming said he's not convinced the government's actions will fix deeply rooted privacy problems. He pointed to other breaches that have occurred in the health and forests ministries.

"(This is) bad decision making in a crisis-like environment, I think, created by B.C. Liberals cuts in the Ministry of Education and elsewhere."

The commission will follow up in three months to determine the extent to which the ministry has implemented the recommendations. It will also conduct an audit of privacy training.



Advertisements

Latest Canada & World News

  • India's farmers renew protests, challenging Modi government

    World News CTV News
    NEW DELHI -- Thousands of Indian farmers blocked traffic on major roads and railway tracks outside of the nation's capital on Monday, marking one year of demonstrations against government-backed laws that they say will shatter their livelihoods. Source
  • Businesses, schools and cities to observe National Day for Truth and Reconciliation

    Canada News CTV News
    As the first National Day for Truth and Reconciliation approaches, Alana Hogstead has decided as a small-business owner to close up her shop in honour of the day. Hogstead co-owns Martha's Music in Camrose, Alta. Source
  • A guide to COVID-19 school outbreak protocols across Canada

    Canada News CBC News
    Students from kindergarten to Grade 12 across Canada have been back in class for a few weeks now — but that doesn't mean a complete return to normal, as some schools report COVID-19 outbreaks among students and staff. While every province and territory defines the term "outbreak" differently, all have released plans that outline how public health officials will help schools manage an outbreak on a case-by-case basis. Source
  • Forced to sit out during pandemic, nurse calls for changes to Ontario's registration process

    Canada News CBC News
    When her Canadian wife was offered an exciting new job in Thunder Bay in the summer of 2019, Christy Tashjian and her family made the big decision to move from Texas to northwestern Ontario. Trained and working as a nurse practitioner in the United States, Tashjian told CBC News that she didn't think it would be a big deal to transfer her licence and get her registration to work in Ontario. Source
  • Search for Brian Laundrie continues as authorities comb through swampland

    World News CTV News
    As authorities continue their second week of searching tens of thousands of acres of swampland for Gabby Petito's fiance, Brian Laundrie, they are also seeking out new evidence in the investigation. FBI agents returned to the Florida home Laundrie shared with his parents Sunday, as seen in video shot by CNN. Source
  • Strong earthquake rattles Greek island of Crete; 1 dead

    World News CTV News
    ATHENS, GREECE -- A strong earthquake with a preliminary magnitude of 5.8 struck the southern Greek island of Crete Monday morning, killing one person and injuring several more, authorities said. The quake sent people fleeing into the streets, while schools were evacuated. Source
  • Moulin Rouge! The Musical dominates Tonys with 10 awards

    World News CBC News
    Moulin Rouge! The Musical, a jukebox adaptation of Baz Luhrmann's hyperactive 2001 movie, won the best new musical crown at the Tony Awards on a Sunday night when Broadway looked back to honour shows shuttered by COVID-19, mourn its fallen and also look forward to welcoming audiences again. Source
  • Outcome uncertain as Japan's ruling party heads to vote on next PM

    World News CTV News
    TOKYO -- Japan's ruling party votes on Wednesday for the country's next prime minister in an election that has turned into the most unpredictable race since Shinzo Abe made a surprise comeback almost a decade ago, defeating a popular rival in a runoff. Source
  • Private vaccine verification app Portpass sparks privacy, security concerns

    Canada News CBC News
    Private proof-of-vaccination app Portpass may be easy to manipulate with fake vaccine records and may not securely protect users' personal information, experts say. The Calgary-based company has said it has more than 500,000 users across Canada registered for its app, which is touted as a way to store and share vaccine records and COVID-19 test results. Source
  • Canadian bishop hopes residential school apology marks 'step of healing'

    Canada News CBC News
    A Calgary bishop says he hopes the apology the Canadian Conference of Catholic Bishops made earlier this week for its church's involvement in residential schools marks "a step of healing" toward reconciliation with survivors and their families. Source