Privacy commissioner raps B.C. for massive privacy protection failure

VICTORIA -- British Columbia's Education Ministry lost personal information pertaining to 3.4 million students when staff breached security policies and misplaced a hard drive with data stretching back 30 years, an investigation has revealed.

See Full Article

Privacy commissioner Elizabeth Denham said in a report released Thursday that the ministry did not secure a portable hard drive when the information was transferred from computer servers in an effort to save on storage costs.

A series of actions put the information at risk, assistant commissioner Jay Fedorak said.

"The policies were good and it appeared that the employees were aware of the policies," he said in an interview. "They just didn't follow them."

"Policy is important, but policy alone isn't enough," Fedorak said. "It's important that there be adequate and effective training of staff and some compliance auditing or follow-up."

The lost information collected between 1986 and 2009 was mostly associated with students in British Columbia and Yukon.

It included names, addresses, dates of birth, gender, grades, schools, personal education numbers, graduation status, financial aid data and designations such as ESL or special needs.

A smaller number of records included more sensitive information, such as teacher retirement plans, education outcomes for student cancer survivors, health and behaviour issues and children in care.

The ministry discovered the drive missing last August, when a team of up to 50 bureaucrats began searching, to no avail. The Office of the Information and Privacy Commission was notified in September.

"They satisfied us they had looked in every box, in every desk, in every drawer, and they weren't able to find it," Fedorak said.

Investigators said the device could have been missing for as long as five years. After moving information off the server, staff failed to encrypt the device. Then they transferred it to a warehouse that wasn't equipped to secure information or keep track of devices for retrieval.

Denham made nine recommendations to strengthen the security of personal information, including encrypting all mobile data storage devices and maintaining accurate inventories of personal information.

"If this was actually a situation involving a cash loss of $3.4 million, I believe the government would take rapid, dramatic and decisive action to deal with the situation," she said in her report.

Education Minister Mike Bernier acknowledged the privacy breach as "unacceptable" and described the commissioner's assessment and recommendations as "fair and balanced."

"We sincerely apologize for any inconvenience this incident may have caused people," he said in a statement.

Bernier also said the government must do a better job of ensuring that public servants receive ongoing training. He said a formal review of the ministry's personal information management practices is underway.

Enhanced privacy policies will be introduced in the coming weeks, he said.

But Opposition New Democrat education critic Rob Fleming said he's not convinced the government's actions will fix deeply rooted privacy problems. He pointed to other breaches that have occurred in the health and forests ministries.

"(This is) bad decision making in a crisis-like environment, I think, created by B.C. Liberals cuts in the Ministry of Education and elsewhere."

The commission will follow up in three months to determine the extent to which the ministry has implemented the recommendations. It will also conduct an audit of privacy training.



Advertisements

Latest Canada & World News

  • Cheers! Birthday boy given $288 fine for dangerous Vancouver SkyTrain ride

    Canada News Toronto Sun
    Most people are happy to reach another birthday, but at least one reveller who was out celebrating his 20th didn't seem to mind tempting mortality. Just after midnight on Dec. 9, Transit Police were notified of a man who was riding in between cars on a SkyTrain headed eastbound. Source
  • Toronto FC loses MLS Cup to Sounders in penalty kicks

    Canada News CBC News
    Seattle goalkeeper Stefan Frei came back to haunt his former team as the Sounders defeated Toronto 5-4 in a penalty shootout to win the MLS Cup and end a long, chilly Saturday night. It was 0-0 after regulation, with Frei keeping Seattle in the game with a marvellous save in extra time. Source
  • Rex Tillerson, top contender for secretary of State, is CEO with close ties to Russia

    World News CTV News
    WASHINGTON -- President-elect Donald Trump has found an accomplished American executive in Rex Tillerson, but one whose longstanding support for free trade, international law and an expansive U.S. presence in the Middle East largely doesn't fit with what Trump has pitched to supporters. Source
  • Italian President Sergio Mattarella vows quick fix to country's PM crisis

    World News CBC News
    Italian President Sergio Mattarella pledged on Saturday to act quickly to solve a government crisis prompted by Matteo Renzi's resignation as prime minister, with all major parties calling for elections as soon as possible. Before any vote can take place, however, Italy needs a new electoral law. Source
  • Crowded Nigerian church collapses, killing at least 60

    World News Toronto Sun
    LAGOS, Nigeria — The roof of a crowded church collapsed onto worshippers in southern Nigeria on Saturday, killing at least 60 people, witnesses and an official said. The Reigners Bible Church International in Uyo, capital of Akwa Ibom state, was still under construction and workers had been rushing to finish it in time for Saturday’s ceremony to ordain founder Akan Weeks as a bishop, congregants said. Source
  • Tanker rams into vehicles on Kenya road, killing more than 30

    World News Toronto Sun
    NAIROBI, Kenya — A tanker carrying chemical gas slammed into other vehicles and burst into flames on a major road in Kenya, killing more than 30 people and injuring 10, officials said Sunday. The vehicle lost control while going downhill on the road from the capital of Nairobi to Naivasha late Saturday, said Mwachi Pius Mwachi, the deputy director and communications officer for the National Disaster Management Unit. Source
  • 2 explosions outside Istanbul soccer stadium; 29 killed, 166 wounded [Video]

    World News Toronto Sun
    ISTANBUL — Two explosions struck Saturday night outside a major soccer stadium in Istanbul after fans had gone home, an attack that wounded at least 20 police officers, Turkish authorities said. One of the blasts was thought to be a car bomb and the second appeared to have been caused by a suicide bomber. Source
  • Montreal cabbie, 77, struggles to retire as ride-sharing apps devalue taxi permits

    Canada News CTV News
    Canada’s aging cab drivers fear the rise of ride-hailing apps like Uber will render their pricey government-issued operating permits worthless. Many are counting on selling them at a profit to provide a nest egg for retirement. Source
  • Montreal cabbie, 77, struggles to retire as ride-hailing apps devalue taxi permits

    Canada News CTV News
    Canada’s aging cab drivers fear the rise of ride-hailing apps like Uber will render their pricey government-issued operating permits worthless. Many are counting on selling them at a profit to provide a nest egg for retirement. Source
  • Over 30 killed after chemical gas tanker crashes in Kenya

    World News CBC News
    A tanker carrying chemical gas slammed into other vehicles and burst into flames on a major road in Kenya, killing more than 30 people and injuring 10, officials said Sunday. The vehicle lost control while going downhill on the road from the capital of Nairobi to Naivasha late Saturday, said Mwachi Pius Mwachi, the deputy director and communications officer for the National Disaster Management Unit. Source