Privacy commissioner raps B.C. for massive privacy protection failure

VICTORIA -- British Columbia's Education Ministry lost personal information pertaining to 3.4 million students when staff breached security policies and misplaced a hard drive with data stretching back 30 years, an investigation has revealed.

See Full Article

Privacy commissioner Elizabeth Denham said in a report released Thursday that the ministry did not secure a portable hard drive when the information was transferred from computer servers in an effort to save on storage costs.

A series of actions put the information at risk, assistant commissioner Jay Fedorak said.

"The policies were good and it appeared that the employees were aware of the policies," he said in an interview. "They just didn't follow them."

"Policy is important, but policy alone isn't enough," Fedorak said. "It's important that there be adequate and effective training of staff and some compliance auditing or follow-up."

The lost information collected between 1986 and 2009 was mostly associated with students in British Columbia and Yukon.

It included names, addresses, dates of birth, gender, grades, schools, personal education numbers, graduation status, financial aid data and designations such as ESL or special needs.

A smaller number of records included more sensitive information, such as teacher retirement plans, education outcomes for student cancer survivors, health and behaviour issues and children in care.

The ministry discovered the drive missing last August, when a team of up to 50 bureaucrats began searching, to no avail. The Office of the Information and Privacy Commission was notified in September.

"They satisfied us they had looked in every box, in every desk, in every drawer, and they weren't able to find it," Fedorak said.

Investigators said the device could have been missing for as long as five years. After moving information off the server, staff failed to encrypt the device. Then they transferred it to a warehouse that wasn't equipped to secure information or keep track of devices for retrieval.

Denham made nine recommendations to strengthen the security of personal information, including encrypting all mobile data storage devices and maintaining accurate inventories of personal information.

"If this was actually a situation involving a cash loss of $3.4 million, I believe the government would take rapid, dramatic and decisive action to deal with the situation," she said in her report.

Education Minister Mike Bernier acknowledged the privacy breach as "unacceptable" and described the commissioner's assessment and recommendations as "fair and balanced."

"We sincerely apologize for any inconvenience this incident may have caused people," he said in a statement.

Bernier also said the government must do a better job of ensuring that public servants receive ongoing training. He said a formal review of the ministry's personal information management practices is underway.

Enhanced privacy policies will be introduced in the coming weeks, he said.

But Opposition New Democrat education critic Rob Fleming said he's not convinced the government's actions will fix deeply rooted privacy problems. He pointed to other breaches that have occurred in the health and forests ministries.

"(This is) bad decision making in a crisis-like environment, I think, created by B.C. Liberals cuts in the Ministry of Education and elsewhere."

The commission will follow up in three months to determine the extent to which the ministry has implemented the recommendations. It will also conduct an audit of privacy training.



Advertisements

Latest Canada & World News

  • Armenia votes in election triggered by war defeat

    World News CTV News
    YEREVAN, ARMENIA -- Polls have closed in Armenia's national parliamentary election that was held to try to resolve tensions over last year's defeat in fighting against Azerbaijan over the separatist region of Nagorno-Karabakh. Sunday's early election was called by Prime Minister Nikol Pashinyan in a bid to ease public anger over the peace deal he signed in November, which set off months of protests demanding his resignation. Source
  • Biden to meet with Afghan President Ghani as violence surges

    World News CTV News
    WASHINGTON -- U.S. President Joe Biden will meet at the White House with Afghan President Ashraf Ghani and the chairman of Afghanistan's High Council for National Reconciliation Abdullah Abdullah on Friday to discuss U.S. troop withdrawal amid a surge in fighting between Afghan forces and the Taliban across the country. Source
  • Ducharme feels 'helpless' watching Habs from home after positive COVID-19 test

    Canada News CBC News
    Dominique Ducharme felt helpless. The Montreal Canadiens interim head coach — hours after testing positive for COVID-19 — was sitting at home as his team battled in the third round of the Stanley Cup playoffs. And all he could do was watch. Source
  • Hot air balloon crash-lands outside Denver, injuring three passengers

    World News CTV News
    A hot air balloon crash-landed at Chatfield State Park outside Denver on Sunday morning, injuring several passengers, the Jefferson County Sheriff said. Three passengers were taken to the hospital with non-life-threatening injuries, and three others are doing OK, the sheriff said on Twitter. Source
  • 5-year-old girl in life-threatening condition after birthday party shooting in Toronto

    Canada News CBC News
    A five-year-old girl remains in life-threatening condition following a shooting during an outdoor children's birthday party in the Rexdale neighbourhood of northwest Toronto on Saturday evening, police say. An 11-year-old boy and a 23-year-old man who were also shot remain in non-life-threatening condition in hospital, said Toronto police spokesperson Const. Source
  • Taiwan welcomes U.S. vaccine aid, bolstering its COVID fight

    World News CTV News
    TAOYUAN, TAIWAN -- Taiwan welcomed 2.5 million COVID-19 vaccine doses from the United States on Sunday as help from a true friend, more than doubling the major semiconductor-producing island's arsenal of shots as it deals with a cluster of domestic infections. Source
  • Urgent reforms needed to military justice system to protect misconduct victims: Fish

    Canada News CTV News
    OTTAWA -- A retired Supreme Court judge is calling for urgent reforms to Canada's military justice system to prevent victims of misconduct, sexual and otherwise, from continuing to suffer. Morris Fish says the current system is rife with areas where the potential for interference in police investigations and courts martial from the chain of command exists, which is why action is needed now. Source
  • Sask. starts Step 2 of reopening roadmap

    Canada News CTV News
    REGINA -- Saskatchewan began the second phase of its reopening plan Sunday as certain public health measures loosened across the province. Step 2, which was triggered when 70 per cent of people age 30 and older got their first dose, will see capacity limits in stores lifted and restaurants will no longer have a limit on the number of people allowed to sit together at a table. Source
  • Tropical depression Claudette kills at least 12 in Alabama as storm lashes southeastern U.S.

    World News CBC News
    Tropical depression Claudette claimed 12 lives in Alabama as the storm swept across the southeastern United States, causing flash flooding and spurring tornadoes that destroyed dozens of homes. Ten people, including nine children, were killed Saturday in a two-vehicle crash, according to Butler County Coroner Wayne Garlock, who said the vehicles likely hydroplaned on wet roads. Source
  • Women twice as likely as men to continue wearing masks as Canada reopens: survey

    Canada News CTV News
    SASKATOON -- Women were more than twice as likely as men to say they’ll keep wearing masks in crowded places when their community reopens, according to a new survey by Nanos Research, with 32 per cent of women saying they would continue to wear face coverings compared to just 16 per cent of males. Source