Privacy commissioner raps B.C. for massive privacy protection failure

VICTORIA -- British Columbia's Education Ministry lost personal information pertaining to 3.4 million students when staff breached security policies and misplaced a hard drive with data stretching back 30 years, an investigation has revealed.

See Full Article

Privacy commissioner Elizabeth Denham said in a report released Thursday that the ministry did not secure a portable hard drive when the information was transferred from computer servers in an effort to save on storage costs.

A series of actions put the information at risk, assistant commissioner Jay Fedorak said.

"The policies were good and it appeared that the employees were aware of the policies," he said in an interview. "They just didn't follow them."

"Policy is important, but policy alone isn't enough," Fedorak said. "It's important that there be adequate and effective training of staff and some compliance auditing or follow-up."

The lost information collected between 1986 and 2009 was mostly associated with students in British Columbia and Yukon.

It included names, addresses, dates of birth, gender, grades, schools, personal education numbers, graduation status, financial aid data and designations such as ESL or special needs.

A smaller number of records included more sensitive information, such as teacher retirement plans, education outcomes for student cancer survivors, health and behaviour issues and children in care.

The ministry discovered the drive missing last August, when a team of up to 50 bureaucrats began searching, to no avail. The Office of the Information and Privacy Commission was notified in September.

"They satisfied us they had looked in every box, in every desk, in every drawer, and they weren't able to find it," Fedorak said.

Investigators said the device could have been missing for as long as five years. After moving information off the server, staff failed to encrypt the device. Then they transferred it to a warehouse that wasn't equipped to secure information or keep track of devices for retrieval.

Denham made nine recommendations to strengthen the security of personal information, including encrypting all mobile data storage devices and maintaining accurate inventories of personal information.

"If this was actually a situation involving a cash loss of $3.4 million, I believe the government would take rapid, dramatic and decisive action to deal with the situation," she said in her report.

Education Minister Mike Bernier acknowledged the privacy breach as "unacceptable" and described the commissioner's assessment and recommendations as "fair and balanced."

"We sincerely apologize for any inconvenience this incident may have caused people," he said in a statement.

Bernier also said the government must do a better job of ensuring that public servants receive ongoing training. He said a formal review of the ministry's personal information management practices is underway.

Enhanced privacy policies will be introduced in the coming weeks, he said.

But Opposition New Democrat education critic Rob Fleming said he's not convinced the government's actions will fix deeply rooted privacy problems. He pointed to other breaches that have occurred in the health and forests ministries.

"(This is) bad decision making in a crisis-like environment, I think, created by B.C. Liberals cuts in the Ministry of Education and elsewhere."

The commission will follow up in three months to determine the extent to which the ministry has implemented the recommendations. It will also conduct an audit of privacy training.



Advertisements

Latest Canada & World News

  • Immigrants who gain citizenship narrows the economic gap: U.S. census

    World News CTV News
    ORLANDO, Fla. -- New figures from the U.S. Census Bureau show that citizenship appears to narrow the economic gap between the foreign-born and native-born in the United States. The 2018 figures released Monday offer a view of immigrants' education, wealth, and the jobs they work in. Source
  • Detained U.S. immigrants sue over conditions, medical care

    World News CTV News
    LOS ANGELES -- Immigrants held in U.S. detention facilities filed a lawsuit Monday demanding adequate medical care and treatment and accommodations for disabilities. In the suit filed by disability and civil rights advocates in U.S. Source
  • Customer shoots Taco Bell worker through a drive-up window

    World News CTV News
    OKLAHOMA CITY - Police in Oklahoma City are searching for a man who they say shot a Taco Bell employee through the drive-through window. The shooting happened at about 1 a.m. Saturday at a Taco Bell near Northwest 23rd Street and North May Avenue. Source
  • Campers forced out of northern B.C. park after August snowstorm damages trees

    Canada News CTV News
    A mid-August snowstorm forced a northern B.C. campground to close over the weekend due to safety issues. Snow fell over parts of the province on Sunday, including on the Alaska Highway near the Yukon border. Source
  • Canadian focusing on memories shared with her slain fiance: New Zealand police

    Canada News CTV News
    WELLINGTON, New Zealand -- Police in New Zealand say a grieving Canadian woman is focusing on the memories she shared with her Australian fiance before he was murdered Friday in a seemingly random attack. Waikato police say in a statement that the woman, identified by Canadian sources as Nova Scotia native Bianca Buckley, is getting support from police and victim services as she gathers her thoughts on the times she shared with her fiance, Sean McKinnon. Source
  • U.S. extends ban on passports for North Korea travel

    World News CTV News
    WASHINGTON -- The Trump administration is extending a ban on the use of U.S. passports for travel to North Korea for another year. A State Department notice released Monday says the ban will remain in place until Aug. Source
  • U.S. extends temporary sales permit to Huawei for 90 days

    World News CBC News
    Commerce Secretary Wilbur Ross said Monday that the United States will extend by 90 days a limited reprieve on U.S. technology sales to Huawei. The U.S. government blacklisted the Chinese technology giant in May, deeming it a national security risk and restricting sales of U.S. Source
  • Early Epstein accuser: Police could have stopped him in 1997

    World News CTV News
    SANTA MONICA, Calif. -- More than two decades before Jeffrey Epstein took his own life, a woman went into a California police station and filed one of the earliest sex-crime complaints against him: that he groped her during what she thought was a modeling interview for the Victoria's Secret catalogue. Source
  • Canadian sprint canoeist Laurence Vincent-Lapointe tests positive for banned substance

    Canada News CBC News
    Laurence Vincent-Lapointe of Trois-Rivières, Que., will not compete at this week's canoe sprint world championships in Szeged, Hungary after failing an out-of-competition doping test in late July and has been provisionally suspended, pending the outcome of her case. Source
  • Ohio man charged over alleged threat to Jewish community centre

    World News CBC News
    Police say a man accused of making what they believe was a threat to a Jewish centre in Ohio on Instagram has been arrested on telecommunications harassment and aggravated menacing charges. New Middletown police say they arrested 20-year-old James Reardon, Jr. Source