Privacy commissioner raps B.C. for massive privacy protection failure

VICTORIA -- British Columbia's Education Ministry lost personal information pertaining to 3.4 million students when staff breached security policies and misplaced a hard drive with data stretching back 30 years, an investigation has revealed.

See Full Article

Privacy commissioner Elizabeth Denham said in a report released Thursday that the ministry did not secure a portable hard drive when the information was transferred from computer servers in an effort to save on storage costs.

A series of actions put the information at risk, assistant commissioner Jay Fedorak said.

"The policies were good and it appeared that the employees were aware of the policies," he said in an interview. "They just didn't follow them."

"Policy is important, but policy alone isn't enough," Fedorak said. "It's important that there be adequate and effective training of staff and some compliance auditing or follow-up."

The lost information collected between 1986 and 2009 was mostly associated with students in British Columbia and Yukon.

It included names, addresses, dates of birth, gender, grades, schools, personal education numbers, graduation status, financial aid data and designations such as ESL or special needs.

A smaller number of records included more sensitive information, such as teacher retirement plans, education outcomes for student cancer survivors, health and behaviour issues and children in care.

The ministry discovered the drive missing last August, when a team of up to 50 bureaucrats began searching, to no avail. The Office of the Information and Privacy Commission was notified in September.

"They satisfied us they had looked in every box, in every desk, in every drawer, and they weren't able to find it," Fedorak said.

Investigators said the device could have been missing for as long as five years. After moving information off the server, staff failed to encrypt the device. Then they transferred it to a warehouse that wasn't equipped to secure information or keep track of devices for retrieval.

Denham made nine recommendations to strengthen the security of personal information, including encrypting all mobile data storage devices and maintaining accurate inventories of personal information.

"If this was actually a situation involving a cash loss of $3.4 million, I believe the government would take rapid, dramatic and decisive action to deal with the situation," she said in her report.

Education Minister Mike Bernier acknowledged the privacy breach as "unacceptable" and described the commissioner's assessment and recommendations as "fair and balanced."

"We sincerely apologize for any inconvenience this incident may have caused people," he said in a statement.

Bernier also said the government must do a better job of ensuring that public servants receive ongoing training. He said a formal review of the ministry's personal information management practices is underway.

Enhanced privacy policies will be introduced in the coming weeks, he said.

But Opposition New Democrat education critic Rob Fleming said he's not convinced the government's actions will fix deeply rooted privacy problems. He pointed to other breaches that have occurred in the health and forests ministries.

"(This is) bad decision making in a crisis-like environment, I think, created by B.C. Liberals cuts in the Ministry of Education and elsewhere."

The commission will follow up in three months to determine the extent to which the ministry has implemented the recommendations. It will also conduct an audit of privacy training.



Advertisements

Latest Canada & World News

  • Russia strikes Kyiv as troops consolidate gains in the east

    World News CTV News
    KYIV, Ukraine - Russia attacked the Ukrainian capital early Sunday, striking at least two residential buildings, the mayor of Kyiv said, as elsewhere Russian troops fought to consolidate their gains in the country's east. Associated Press journalists in Kyiv saw rescue services battling flames and rescuing civilians. Source
  • At least 20 dead in South African club; cause not yet known

    World News CTV News
    JOHANNESBURG - South African police are investigating the deaths of at least 20 people at a nightclub in the coastal town of East London early Sunday morning. It is unclear what led to the deaths of the young people, who were reportedly attending a party to celebrate the end of winter school exams. Source
  • Public safety minister eyes steps to strengthen oversight of the RCMP

    Canada News CTV News
    OTTAWA - The federal public safety minister says he is "deeply committed" to enhancing oversight of the RCMP by strengthening the role of the national police force's management advisory board. In an interview, Marco Mendicino expressed a desire to give the board the "independence and autonomy that it needs" -- possibly through legislative amendments -- to ensure adequate supervision. Source
  • As Senate-confirmed justices end Roe, how will voters react?

    World News CTV News
    WASHINGTON - The end of Roe v. Wade started in the Senate. It was the Senate Republican partnership with President Donald Trump to confirm conservative judges, and transform the federal judiciary, that paved the way for the Supreme Court's landmark ruling to overturn the constitutional right to abortion. Source
  • At least 20 people found dead inside South African nightclub

    World News CBC News
    South African police are investigating the deaths of at least 20 people at a nightclub in the coastal town of East London early Sunday morning. It is unclear what led to the deaths of the young people, who were reportedly attending a party to celebrate the end of winter school exams. Source
  • Quebec homeowners say Ottawa must address decades of erosion caused by ship traffic

    Canada News CTV News
    Every year, 100-year-old Angélique Beauchemin watches more of her land crumble into the St. Lawrence River. From her home along a busy stretch of river in Verchères, Que., on Montreal's South Shore, she watches waves from passing ships crash into the rock wall at the base of her property, sweeping chunks away and eating into the unprotected banks from below. Source
  • Climate goals may be at odds with G7 response to fallout from Russian invasion

    World News CTV News
    SCHLOSS ELMAU, GERMANY - G7 leaders opened their summit Sunday with a discussion about shaping the global economy at a time when conflict and unrest are driving up prices and access to key goods around the world. Source
  • From closures to near-normal routines, students look back on COVID-warped school year

    Canada News CTV News
    The final bell is about to ring at the end of a topsy-turvy school year warped by the COVID-19 crisis. Many Canadian students cautiously returned to class this fall under strict pandemic protocols, such as mandatory masking and social distancing. Source
  • Live updates: G7 leaders poke fun at Putin's tough image

    World News CTV News
    ELMAU, Germany - The latest on the G7 summit, the annual meeting of the leading democratic economies, which this year is being held in Germany's Bavarian Alps. Leaders at the Group of Seven summit in Germany have joked about what would make them look tougher than Russian President Vladimir Putin. Source
  • Live updates: Germany's leader commends unity on Ukraine

    World News CTV News
    ELMAU, Germany - The latest on the G7 summit, the annual meeting of the leading democratic economies, which this year is being held in Germany's Bavarian Alps. German Chancellor Olaf Scholz says attacks by Russia on residential buildings in Kyiv show the importance of international unity in supporting Ukraine. Source