Privacy commissioner raps B.C. for massive privacy protection failure

VICTORIA -- British Columbia's Education Ministry lost personal information pertaining to 3.4 million students when staff breached security policies and misplaced a hard drive with data stretching back 30 years, an investigation has revealed.

See Full Article

Privacy commissioner Elizabeth Denham said in a report released Thursday that the ministry did not secure a portable hard drive when the information was transferred from computer servers in an effort to save on storage costs.

A series of actions put the information at risk, assistant commissioner Jay Fedorak said.

"The policies were good and it appeared that the employees were aware of the policies," he said in an interview. "They just didn't follow them."

"Policy is important, but policy alone isn't enough," Fedorak said. "It's important that there be adequate and effective training of staff and some compliance auditing or follow-up."

The lost information collected between 1986 and 2009 was mostly associated with students in British Columbia and Yukon.

It included names, addresses, dates of birth, gender, grades, schools, personal education numbers, graduation status, financial aid data and designations such as ESL or special needs.

A smaller number of records included more sensitive information, such as teacher retirement plans, education outcomes for student cancer survivors, health and behaviour issues and children in care.

The ministry discovered the drive missing last August, when a team of up to 50 bureaucrats began searching, to no avail. The Office of the Information and Privacy Commission was notified in September.

"They satisfied us they had looked in every box, in every desk, in every drawer, and they weren't able to find it," Fedorak said.

Investigators said the device could have been missing for as long as five years. After moving information off the server, staff failed to encrypt the device. Then they transferred it to a warehouse that wasn't equipped to secure information or keep track of devices for retrieval.

Denham made nine recommendations to strengthen the security of personal information, including encrypting all mobile data storage devices and maintaining accurate inventories of personal information.

"If this was actually a situation involving a cash loss of $3.4 million, I believe the government would take rapid, dramatic and decisive action to deal with the situation," she said in her report.

Education Minister Mike Bernier acknowledged the privacy breach as "unacceptable" and described the commissioner's assessment and recommendations as "fair and balanced."

"We sincerely apologize for any inconvenience this incident may have caused people," he said in a statement.

Bernier also said the government must do a better job of ensuring that public servants receive ongoing training. He said a formal review of the ministry's personal information management practices is underway.

Enhanced privacy policies will be introduced in the coming weeks, he said.

But Opposition New Democrat education critic Rob Fleming said he's not convinced the government's actions will fix deeply rooted privacy problems. He pointed to other breaches that have occurred in the health and forests ministries.

"(This is) bad decision making in a crisis-like environment, I think, created by B.C. Liberals cuts in the Ministry of Education and elsewhere."

The commission will follow up in three months to determine the extent to which the ministry has implemented the recommendations. It will also conduct an audit of privacy training.



Advertisements

Latest Canada & World News

  • Special prosecutor to advise RCMP on B.C. political donations

    Canada News CTV News
    VANCOUVER - A special prosecutor has been appointed to provide legal advice to the RCMP over possible violations of British Columbia's Elections Act. A statement from the B.C. Criminal Justice Branch says David Butcher's appointment is in the public interest and he'll help the Mounties with legal advice in an investigation into contributions made to B.C. Source
  • 'Read my lips': Putin denies U.S. election hacking allegations

    World News CTV News
    MOSCOW -- President Vladimir Putin on Thursday emphatically denied allegations of Russian meddling in the U.S. presidential election and said Moscow would maintain hopes of improving relations while waiting for political infighting in Washington to stop. Source
  • Florida man sentenced to five years for DUI crash that killed wife as they had road sex

    World News Toronto Sun
    A Florida man has been sentenced to five years in prison following a booze-fuelled car wreck in 2014 that killed his wife as they had road sex. Matthew Notebaert, 33, told authorities he remembers his wife, Amanda, sitting on his lap before waking up inside their totaled vehicle beside her lifeless body. Source
  • 'I've missed her very much': Ontario man plans reunion with mom after winning lottery

    Canada News CTV News
    An Ontario man is planning to use part of his $12M lottery winnings to reunite with his mother, whom he hasn’t seen in 11 years. Sheba Sheba, who lives in Woodbridge, Ont., hasn’t seen his mother, who lives in Lebanon, in 11 years due to distance, health issues and a lack of funds. Source
  • Bombardier under fire for $32.6M US given to executives while taking government cash

    Canada News CBC News
    Bombardier is being slammed for its "sense of entitlement" after awarding $32.6 million US to senior executives even as it laid off thousands of workers and sought government aid. The payout represents an increase of nearly 50 per cent for its top five executives and board chairman, compared with 2015. Source
  • UBC researchers discover marijuana flavour genes, aim to create standards for taste

    Canada News CBC News
    Consumers can trust what varieties of wine taste like regardless of the store they buy it from, and they could soon have similar expectations for strains of marijuana, say researchers at the University of British Columbia. Source
  • 'Angel of Death' serial killer dies after attack in Ohio prison

    World News CTV News
    TOLEDO, Ohio -- A serial killer known as the "Angel of Death" after he admitted killing three dozen hospital patients in Ohio and Kentucky died Thursday, two days after investigators said he was attacked in prison, Ohio's prisons department said. Source
  • Trump takes 1st step in NAFTA renegotiation: Sends draft letter to Congress

    World News CBC News
    The Trump administration has taken an early step in renegotiating the North American Free Trade Agreement, sending the U.S. Congress a draft list of priorities for the negotiation that expresses hope for change in a broad range of areas. Source
  • Toronto police charge self-professed psychic with practising witchcraft

    Canada News CTV News
    TORONTO -- Police in Toronto say they've charged a 37-year-old man with practising witchcraft. Investigators say the accused advertised his services as an astrologer and psychic in February and March. They allege a 44-year-old man who consulted the accused for psychic services earlier this month was told a sick family member had been the victim of an evil spirit. Source
  • Psychic hit with witchcraft charge after man pays $101K to remove evil spirit: police

    Canada News CTV News
    TORONTO -- Police in Toronto say a psychic has been charged with pretending to practise witchcraft after a customer allegedly paid more than $100,000 to have an "evil spirit" removed. Investigators say the 37-year-old accused advertised his services as an astrologer and psychic in February and March. Source