Privacy commissioner raps B.C. for massive privacy protection failure

VICTORIA -- British Columbia's Education Ministry lost personal information pertaining to 3.4 million students when staff breached security policies and misplaced a hard drive with data stretching back 30 years, an investigation has revealed.

See Full Article

Privacy commissioner Elizabeth Denham said in a report released Thursday that the ministry did not secure a portable hard drive when the information was transferred from computer servers in an effort to save on storage costs.

A series of actions put the information at risk, assistant commissioner Jay Fedorak said.

"The policies were good and it appeared that the employees were aware of the policies," he said in an interview. "They just didn't follow them."

"Policy is important, but policy alone isn't enough," Fedorak said. "It's important that there be adequate and effective training of staff and some compliance auditing or follow-up."

The lost information collected between 1986 and 2009 was mostly associated with students in British Columbia and Yukon.

It included names, addresses, dates of birth, gender, grades, schools, personal education numbers, graduation status, financial aid data and designations such as ESL or special needs.

A smaller number of records included more sensitive information, such as teacher retirement plans, education outcomes for student cancer survivors, health and behaviour issues and children in care.

The ministry discovered the drive missing last August, when a team of up to 50 bureaucrats began searching, to no avail. The Office of the Information and Privacy Commission was notified in September.

"They satisfied us they had looked in every box, in every desk, in every drawer, and they weren't able to find it," Fedorak said.

Investigators said the device could have been missing for as long as five years. After moving information off the server, staff failed to encrypt the device. Then they transferred it to a warehouse that wasn't equipped to secure information or keep track of devices for retrieval.

Denham made nine recommendations to strengthen the security of personal information, including encrypting all mobile data storage devices and maintaining accurate inventories of personal information.

"If this was actually a situation involving a cash loss of $3.4 million, I believe the government would take rapid, dramatic and decisive action to deal with the situation," she said in her report.

Education Minister Mike Bernier acknowledged the privacy breach as "unacceptable" and described the commissioner's assessment and recommendations as "fair and balanced."

"We sincerely apologize for any inconvenience this incident may have caused people," he said in a statement.

Bernier also said the government must do a better job of ensuring that public servants receive ongoing training. He said a formal review of the ministry's personal information management practices is underway.

Enhanced privacy policies will be introduced in the coming weeks, he said.

But Opposition New Democrat education critic Rob Fleming said he's not convinced the government's actions will fix deeply rooted privacy problems. He pointed to other breaches that have occurred in the health and forests ministries.

"(This is) bad decision making in a crisis-like environment, I think, created by B.C. Liberals cuts in the Ministry of Education and elsewhere."

The commission will follow up in three months to determine the extent to which the ministry has implemented the recommendations. It will also conduct an audit of privacy training.



Advertisements

Latest Canada & World News

  • Kushner used personal email for White House messages: lawyer

    World News CTV News
    WASHINGTON – U.S. President Donald Trump's son-in-law, Jared Kushner, used his personal email account on dozens of occasions to communicate with colleagues in the White House, his lawyer said Sunday. Between January and August, Kushner either received or responded to fewer than 100 emails from White House officials from his private account, attorney Abbe Lowell said in a statement that confirmed Kushner's use of a personal address in the first months of the administration. Source
  • Wedding photographer captures groom jumping into river to rescue boy

    Canada News CTV News
    An Ontario couple’s wedding photo session turned into a rescue mission when the groom jumped into a river to save a little boy from drowning. Clayton and Brittany Cook of Cambridge, Ont., had just tied the knot Friday and were posing for their wedding photographer on a park bridge when the groom noticed a child in distress in the water below. Source
  • Wedding photographer captures groom jumping into water to rescue boy

    Canada News CTV News
    An Ontario couple’s wedding photo session turned into a rescue mission when the groom jumped into a river to save a little boy from drowning. Clayton and Brittany Cook of Cambridge, Ont., had just tied the knot Friday and were posing for their wedding photographer on a park bridge when the groom noticed a child in distress in the water below. Source
  • Donald Trump signs proclamation restricting travel from 8 countries

    World News Toronto Sun
    WASHINGTON — Citizens of eight countries will face new restrictions on entry to the U.S. under a proclamation signed by President Donald Trump on Sunday. The new rules, which will impact the citizens of Chad, Iran, Libya, North Korea, Somalia, Syria, Venezuela and Yemen, will go into effect on October 18. Source
  • Ex-Michigan prosecutor who paid for sex released from jail

    World News Toronto Sun
    LANSING, Mich. — A man accused of hiring prostitutes hundreds of times during his 20-year career as a Michigan prosecutor has been released from jail. The Lansing State Journal reports Stuart Dunnings III walked out of the Clinton County Jail early Sunday after serving 10 months. Source
  • Prince Harry greets Canadian winners of the Duke of Edinburgh's Awards

    Canada News CTV News
    TORONTO -- The energy Prince Harry generated at the Invictus Games' opening ceremony concert on Saturday night spilled over to Sunday, when the prince met with dozens of high-achieving Canadian youth at the presentation of The Duke of Edinburgh's International Gold Awards. Source
  • Canada is actually running short of bugs

    Canada News Toronto Sun
    When Jeff Skevington’s parents used to take the family camping in Algonquin Park, they needed to stop the car halfway and buy windshield washer fluid because of all the squished bugs. But Canada is actually running out of bugs Source
  • 1 dead, 7 hurt in Tennessee church shooting [Video]

    World News Toronto Sun
    NASHVILLE — A masked gunman entered a church in Tennessee on Sunday and opened fire, killing at least one person and injuring seven others before apparently shooting himself, an official said. Don Aaron, spokesman for the Metro Nashville Police Department, said the gunman arrived at the parking lot in a blue vehicle as services were ending at the Burnette Chapel Church of Christ in the neighbourhood of Antioch. Source
  • RCMP say they called off pursuit before crash that killed three women

    Canada News CTV News
    LLOYDMINSTER, Sask. -- Mounties say they were chasing a stolen truck that crashed into a minivan and killed three Edmonton women, but add they called off the pursuit long before the deadly collision. RCMP said two women aged 37 and 35, died Friday morning on Highway 16 just east of the Saskatchewan boundary, while a third, aged 53, died a short time later. Source
  • Bautista leads Jays past Yankees in likely final home game

    Canada News CBC News
    Jose Bautista had two hits, drove in one run and scored another to help lift the Blue Jays to a 9-5 win over the New York Yankees on Sunday in what was likely his final home game in a Toronto uniform. Source