Privacy commissioner raps B.C. for massive privacy protection failure

VICTORIA -- British Columbia's Education Ministry lost personal information pertaining to 3.4 million students when staff breached security policies and misplaced a hard drive with data stretching back 30 years, an investigation has revealed.

See Full Article

Privacy commissioner Elizabeth Denham said in a report released Thursday that the ministry did not secure a portable hard drive when the information was transferred from computer servers in an effort to save on storage costs.

A series of actions put the information at risk, assistant commissioner Jay Fedorak said.

"The policies were good and it appeared that the employees were aware of the policies," he said in an interview. "They just didn't follow them."

"Policy is important, but policy alone isn't enough," Fedorak said. "It's important that there be adequate and effective training of staff and some compliance auditing or follow-up."

The lost information collected between 1986 and 2009 was mostly associated with students in British Columbia and Yukon.

It included names, addresses, dates of birth, gender, grades, schools, personal education numbers, graduation status, financial aid data and designations such as ESL or special needs.

A smaller number of records included more sensitive information, such as teacher retirement plans, education outcomes for student cancer survivors, health and behaviour issues and children in care.

The ministry discovered the drive missing last August, when a team of up to 50 bureaucrats began searching, to no avail. The Office of the Information and Privacy Commission was notified in September.

"They satisfied us they had looked in every box, in every desk, in every drawer, and they weren't able to find it," Fedorak said.

Investigators said the device could have been missing for as long as five years. After moving information off the server, staff failed to encrypt the device. Then they transferred it to a warehouse that wasn't equipped to secure information or keep track of devices for retrieval.

Denham made nine recommendations to strengthen the security of personal information, including encrypting all mobile data storage devices and maintaining accurate inventories of personal information.

"If this was actually a situation involving a cash loss of $3.4 million, I believe the government would take rapid, dramatic and decisive action to deal with the situation," she said in her report.

Education Minister Mike Bernier acknowledged the privacy breach as "unacceptable" and described the commissioner's assessment and recommendations as "fair and balanced."

"We sincerely apologize for any inconvenience this incident may have caused people," he said in a statement.

Bernier also said the government must do a better job of ensuring that public servants receive ongoing training. He said a formal review of the ministry's personal information management practices is underway.

Enhanced privacy policies will be introduced in the coming weeks, he said.

But Opposition New Democrat education critic Rob Fleming said he's not convinced the government's actions will fix deeply rooted privacy problems. He pointed to other breaches that have occurred in the health and forests ministries.

"(This is) bad decision making in a crisis-like environment, I think, created by B.C. Liberals cuts in the Ministry of Education and elsewhere."

The commission will follow up in three months to determine the extent to which the ministry has implemented the recommendations. It will also conduct an audit of privacy training.



Advertisements

Latest Canada & World News

  • 'It's a disaster': Trust in long-term care at an all-time low

    Canada News CTV News
    TORONTO -- The COVID-19 pandemic has exacerbated and brought to light issues with Canada's long-term care facilities, wreaking havoc on residents and exposing poor conditions and care, leaving some seniors actively looking at living at home longer. Source
  • FBI arrests 2, including Stone bodyguard, in Capitol riot

    World News CTV News
    NEW YORK -- Two men wanted in the deadly riot at the U.S. Capitol were arrested over the weekend, including one who reportedly served as a bodyguard to former President Donald Trump's longtime political confidant Roger Stone, federal authorities said Monday. Source
  • German lawmaker from Merkel's conservatives quits over face mask scandal

    World News CTV News
    Tracking every case of COVID-19 in Canada Coronavirus vaccine tracker: How many people in Canada have received shots? Source
  • Biden to mark one year of COVID-19 shutdown in primetime address Thursday

    World News CTV News
    U.S. President Joe Biden will deliver his first primetime address this Thursday, commemorating the milestone of one year since the global pandemic coronavirus shut down much of the nation. "The President will deliver his first primetime address to commemorate the one-year anniversary of the COVID-19 shutdown on Thursday. Source
  • Alberta Appeal Court orders 3rd trial for parents in toddler's death

    Canada News CTV News
    CALGARY -- Alberta's top court has ordered a third trial for a couple originally convicted then found not guilty in the death of their ill son. The Alberta Court of Appeal has granted a request by the Crown to overturn the 2019 acquittal of David and Collet Stephan. Source
  • U.S., EU, N.Z. leaders warn pandemic risks women's rights

    World News CTV News
    BRUSSELS, BELGIUM -- The coronavirus pandemic and ensuing economic and political turmoil have sharpened the challenges facing women as they demand equal rights, three of the world's most influential female leaders warned Monday. U.S. Vice President Kamala Harris, New Zealand's Prime Minister Jacinda Ardern and EU chief Ursula von der Leyen addressed the European Parliament on International Women's Day. Source
  • Ontario NDP wants paid time off for workers to get a COVID-19 vaccine

    Canada News CTV News
    TORONTO -- Ontario’s official opposition is calling on the government to allow workers to take three consecutive paid hours off work in order to get a COVID-19 vaccine. “I would ask the premier and the government to make it easy for folks, to take the burden off, to make sure people don’t have to worry about losing pay when they book their appointment to get vaccinated,” NDP leader Andrea Horwath said at Question Period on Monday. Source
  • New Brunswick reports 5 new cases of COVID-19 Monday; active cases increase to 36

    Canada News CTV News
    HALIFAX -- New Brunswick Public Health is reporting five new cases of COVID-19 on Monday. Four previously reported cases are now considered recovered, as the number of active cases in the province increases to 36. Source
  • Price of gas reaches 151.9 cents per litre at some stations in Vancouver

    Canada News CTV News
    VANCOUVER -- Temporary relief drivers saw earlier in the pandemic may be a thing of the past as gas prices continue to climb in Metro Vancouver. On Monday morning, some stations were charging 151.9 cents per litre at pumps in the city. Source
  • Ethics committee summons Kielburger brothers to testify after they duck invitation

    Canada News CBC News
    The House of Commons ethics committee unanimously passed a motion today to compel the men behind WE Charity to appear before MPs to explain their role in the botched summer student grants program and answer questions about allegations of donor fraud. Source