Privacy commissioner raps B.C. for massive privacy protection failure

VICTORIA -- British Columbia's Education Ministry lost personal information pertaining to 3.4 million students when staff breached security policies and misplaced a hard drive with data stretching back 30 years, an investigation has revealed.

See Full Article

Privacy commissioner Elizabeth Denham said in a report released Thursday that the ministry did not secure a portable hard drive when the information was transferred from computer servers in an effort to save on storage costs.

A series of actions put the information at risk, assistant commissioner Jay Fedorak said.

"The policies were good and it appeared that the employees were aware of the policies," he said in an interview. "They just didn't follow them."

"Policy is important, but policy alone isn't enough," Fedorak said. "It's important that there be adequate and effective training of staff and some compliance auditing or follow-up."

The lost information collected between 1986 and 2009 was mostly associated with students in British Columbia and Yukon.

It included names, addresses, dates of birth, gender, grades, schools, personal education numbers, graduation status, financial aid data and designations such as ESL or special needs.

A smaller number of records included more sensitive information, such as teacher retirement plans, education outcomes for student cancer survivors, health and behaviour issues and children in care.

The ministry discovered the drive missing last August, when a team of up to 50 bureaucrats began searching, to no avail. The Office of the Information and Privacy Commission was notified in September.

"They satisfied us they had looked in every box, in every desk, in every drawer, and they weren't able to find it," Fedorak said.

Investigators said the device could have been missing for as long as five years. After moving information off the server, staff failed to encrypt the device. Then they transferred it to a warehouse that wasn't equipped to secure information or keep track of devices for retrieval.

Denham made nine recommendations to strengthen the security of personal information, including encrypting all mobile data storage devices and maintaining accurate inventories of personal information.

"If this was actually a situation involving a cash loss of $3.4 million, I believe the government would take rapid, dramatic and decisive action to deal with the situation," she said in her report.

Education Minister Mike Bernier acknowledged the privacy breach as "unacceptable" and described the commissioner's assessment and recommendations as "fair and balanced."

"We sincerely apologize for any inconvenience this incident may have caused people," he said in a statement.

Bernier also said the government must do a better job of ensuring that public servants receive ongoing training. He said a formal review of the ministry's personal information management practices is underway.

Enhanced privacy policies will be introduced in the coming weeks, he said.

But Opposition New Democrat education critic Rob Fleming said he's not convinced the government's actions will fix deeply rooted privacy problems. He pointed to other breaches that have occurred in the health and forests ministries.

"(This is) bad decision making in a crisis-like environment, I think, created by B.C. Liberals cuts in the Ministry of Education and elsewhere."

The commission will follow up in three months to determine the extent to which the ministry has implemented the recommendations. It will also conduct an audit of privacy training.



Advertisements

Latest Canada & World News

  • Cyclone Idai: Red Cross appeals for donations as Mozambique death toll rises

    World News CTV News
    The Canadian Red Cross has issued an appeal for donations to help victims of a massive cyclone that hit the African country of Mozambique. To make a donation, visit the Canadian Red Cross website. Source
  • Trump: Let Mueller report come out, 'let people see it'

    World News CTV News
    WASHINGTON -- President Donald Trump said Wednesday that he believes special counsel Robert Mueller's report should be released to the public, even as he disparaged its very existence as "ridiculous." "Let it come out, let people see it," Trump told reporters as he left the White House on Wednesday for a trip to Ohio. Source
  • Jury awards $250,000 to woman jailed without seeing a judge

    World News CTV News
    JACKSON, Miss. -- A Mississippi jury is awarding $250,000 in damages to a woman jailed 96 days without seeing a judge. The verdict, including $200,000 in damages against Choctaw County Sheriff Cloyd Halford and $50,000 against the county, was handed down Tuesday after a two-day trial in federal court in Aberdeen. Source
  • European, Canadian regulators to do own review of Boeing jet

    Canada News CTV News
    The decision by Europe and Canada to break with U.S. air-safety regulators over the safety of the Boeing 737 Max is likely to delay the resumption of flights after two of the jets crashed. The Europeans and Canadians vow to conduct their own reviews of Boeing's changes to a key flight-control system, not to simply take the Federal Aviation Administration's word that the alterations are safe. Source
  • Police make arrest after 'erratic driver' hits cars near University of Ottawa

    Canada News CTV News
    OTTAWA -- A man is in police custody after an "erratic driver" smashed into several cars near the University of Ottawa. Ottawa police say several vehicles were damaged in the incident just east of the city's downtown, but there are no reported injuries. Source
  • Visit from classmates a wish come true for northern Manitoba girl fighting brain cancer in Winnipeg

    Canada News CBC News
    After being diagnosed with brain cancer in December and spending weeks away from her home in northern Manitoba, Grade 4 student Kailyn Danielson had one special wish. She wanted to spend a day in Winnipeg, where she's undergoing treatments, with her classmates from Cranberry Portage Elementary School. Source
  • Fed news sends bond yields sharply lower; US stocks mixed

    World News CTV News
    Banks led U.S. stocks mostly lower Wednesday after a brief rally sparked by the Federal Reserve's latest policy update faded. The real action centred in the bond market, where prices rose sharply, pulling Treasury yields down to the lowest levels they've seen in more than a year. Source
  • Officer responds after boy calls 911 over missing teddy bear

    World News CTV News
    WOODBRIDGE, N.J. -- A New Jersey police officer came to the rescue after a 12-year-old boy with autism who lost his teddy bear called 911 for help. Woodbridge Police Officer Khari Manzini arrived at Ryan Paul's home Saturday after the boy called and hung up the phone. Source
  • Pot sector players welcome edibles tax change, disappointed medical tax remains

    Canada News CBC News
    Cannabis industry players welcomed the change in the Federal Budget to tax edibles, extracts, oils and concentrates based on the amount of tetrahydrocannabinol rather than weight, as it could ease pricing for some products and potentially boost product availability. Source
  • Pittsburgh official, husband charged in Detroit hotel case

    World News CTV News
    DETROIT -- An elected official from Pittsburgh and her husband have been charged following an altercation with police in a Detroit hotel. The Wayne County prosecutor's office says 41-year-old Chelsa Wagner faces felony resisting police and misdemeanour disorderly conduct charges. Source