CRA Employee Loses Tax Data on 2,700
DATA LOSSNovember 11, 2011
Privacy Commissioner Jennifer Stoddart is asking why she was never informed of a 2006 Canada Revenue Agency (CRA) data breach in which an employee copied the tax records of almost 2,700 citizens to CDs--and allowed a portion of those to be downloaded to a friend's laptop, reports CTV. During a 2008 grievance hearing against CRA, the employee produced the CDs and asked the panel to read an e-mail saved to one of them, triggering an investigation into the data security practices of the organization. While the disks have been recovered, the laptop is still missing. The CRA says the investigation shows the data was deleted from the laptop "in such a way that an average user could not access through a normal operating system."