School Breaches Policy, Missing Stick Unencrypted
DATA LOSSJanuary 27, 2012
An investigation by the Alberta Office of the Information and Privacy Commissioner has found that a lost memory stick containing the personal information of more than 7,500 school district employees was not encrypted or password protected, CBC reports, despite Edmonton Public School District's policies, guidelines and training practices. The missing stick, lost by an IT staff member, included personal information such as Social Insurance numbers and banking information on some. For others, information included resumes, transcripts and criminal records checks, the report states. The district notified the commissioner's office and employees of the missing stick last March and has since taken steps to prevent similar incidents from occurring, the commissioner said.