Privacy commissioner raps B.C. for massive privacy protection failure

VICTORIA -- British Columbia's Education Ministry lost personal information pertaining to 3.4 million students when staff breached security policies and misplaced a hard drive with data stretching back 30 years, an investigation has revealed.

See Full Article

Privacy commissioner Elizabeth Denham said in a report released Thursday that the ministry did not secure a portable hard drive when the information was transferred from computer servers in an effort to save on storage costs.

A series of actions put the information at risk, assistant commissioner Jay Fedorak said.

"The policies were good and it appeared that the employees were aware of the policies," he said in an interview. "They just didn't follow them."

"Policy is important, but policy alone isn't enough," Fedorak said. "It's important that there be adequate and effective training of staff and some compliance auditing or follow-up."

The lost information collected between 1986 and 2009 was mostly associated with students in British Columbia and Yukon.

It included names, addresses, dates of birth, gender, grades, schools, personal education numbers, graduation status, financial aid data and designations such as ESL or special needs.

A smaller number of records included more sensitive information, such as teacher retirement plans, education outcomes for student cancer survivors, health and behaviour issues and children in care.

The ministry discovered the drive missing last August, when a team of up to 50 bureaucrats began searching, to no avail. The Office of the Information and Privacy Commission was notified in September.

"They satisfied us they had looked in every box, in every desk, in every drawer, and they weren't able to find it," Fedorak said.

Investigators said the device could have been missing for as long as five years. After moving information off the server, staff failed to encrypt the device. Then they transferred it to a warehouse that wasn't equipped to secure information or keep track of devices for retrieval.

Denham made nine recommendations to strengthen the security of personal information, including encrypting all mobile data storage devices and maintaining accurate inventories of personal information.

"If this was actually a situation involving a cash loss of $3.4 million, I believe the government would take rapid, dramatic and decisive action to deal with the situation," she said in her report.

Education Minister Mike Bernier acknowledged the privacy breach as "unacceptable" and described the commissioner's assessment and recommendations as "fair and balanced."

"We sincerely apologize for any inconvenience this incident may have caused people," he said in a statement.

Bernier also said the government must do a better job of ensuring that public servants receive ongoing training. He said a formal review of the ministry's personal information management practices is underway.

Enhanced privacy policies will be introduced in the coming weeks, he said.

But Opposition New Democrat education critic Rob Fleming said he's not convinced the government's actions will fix deeply rooted privacy problems. He pointed to other breaches that have occurred in the health and forests ministries.

"(This is) bad decision making in a crisis-like environment, I think, created by B.C. Liberals cuts in the Ministry of Education and elsewhere."

The commission will follow up in three months to determine the extent to which the ministry has implemented the recommendations. It will also conduct an audit of privacy training.



Advertisements

Latest Canada & World News

  • What are Barcelona's 'Las Ramblas,' where terror attack occurred?

    World News CTV News
    BARCELONA, Spain -- The lengthy Las Ramblas promenade where a van plowed into pedestrians Thursday is a tree-lined walkway that starts in a huge plaza and ends near Barcelona's harbour. It's filled with cafes, restaurants, stalls selling everything from souvenirs to flowers, the city's famed opera house and a baroque palace. Source
  • Terror in Spain: At least 12 dead, 80 injured after van jumps sidewalk plowing into pedestrians [Photos]

    World News Toronto Sun
    BARCELONA, Spain — A white van jumped the sidewalk Thursday in Barcelona’s historic Las Ramblas district, crashing into a summer crowd of residents and tourists and injuring several people, police said. In a photograph shown by public broadcaster RTVE, three people were lying on the ground in the street of the northern Spanish city Thursday afternoon, apparently being helped by police and others. Source
  • July 2017 was hottest on land in recorded history: NOAA

    World News Toronto Sun
    WASHINGTON — Earth yet again sizzled with unprecedented heat last month. The National Oceanic and Atmospheric Administration said Thursday Earth sweated to its second hottest month since recordkeeping began in 1880. At 61.89 degrees (16.63 Celsius), last month was behind July 2016’s all-time record by .09 degrees. Source
  • Immigration board to audit long-term detention process after 'endless circle of mistakes'

    Canada News CBC News
    The Immigration and Refugee Board of Canada says it will carry out an independent audit of the process used to reassess the long-term detention of permanent residents and foreigners after two recent court decisions raised concerns that the rules may not always be applied fairly. Source
  • Websites aim to exile white nationalists in wake of violence

    World News CBC News
    Silicon Valley joined a swelling backlash against white nationalist groups in the U.S. on Wednesday as more technology companies denied their services in response to weekend violence in Charlottesville, Va. Social media networks Twitter and LinkedIn, music service Spotify and security firm Cloudflare were among the companies cutting off services to hate groups or removing material they said spread hate. Source
  • Natalee Holloway's remains finally found?

    World News Toronto Sun
    It was the trip of a lifetime. Natalee Holloway — a pretty 18-year-old from Alabama — and pals from her high school descended on the Caribbean island of Aruba for sun and fun. And then the blond vanished off the face of the earth, her disappearance mired in police corruption and political influence. Source
  • Security threat leads Florida to cancel prison visitations

    World News CTV News
    TALLAHASSEE, Fla. - Prison officials in Florida cited a security threat in cancelling visitation at most of its 148 facilities. In a statement released Wednesday, prison officials said the cancellation is in response to "credible intelligence indicating that small groups of inmates at several institutions may attempt to disrupt operations and impact safety and security. Source
  • Emotional mother-and-child reunion as young former captive arrives in Winnipeg

    Canada News Toronto Sun
    A woman in Winnipeg tightly embraced her 12-year-old son for the first time in three years early Thursday morning when the child was reunited with his family after his liberation from Iraqi militants. Cheers went up from a large crowd on hand when Emad Mishko Tamo arrived at James Armstrong Richardson International Airport, just weeks after he was freed from captivity. Source
  • Stonewall Jackson kin: Take down Confederate monuments

    World News CTV News
    A great-great-grandson of Thomas "Stonewall" Jackson said Thursday that the monument to the legendary Confederate general and others in Virginia's capital city were constructed as symbols of white supremacy and should be taken down. Meanwhile, a descendant of Jefferson Davis said he supports moving the statues to appropriate settings, such as museums. Source
  • Canadians in Spain told to avoid Barcelona tourist area after terror attack [Video]

    World News Toronto Sun
    OTTAWA — Canadians in Spain are being urged to avoid the Las Ramblas area in Barcelona, where a van has plowed through a crowd in the popular tourist area near the city centre. Global Affairs Canada is also urging Canadians in Spain to let their “loved ones know you are safe. Source