Alberta’s privacy commissioner has found Bow Valley College contravened the Freedom of Information and Protection of Privacy Act when it failed “to secure personal information from almost two dozen of its decommissioned servers,” Calgary Herald reports. The 2012 incident involved 21 computer servers the college sent to a nonprofit that specialized in recycling such equipment. However, when one of those servers was later purchased, the buyer found information on nearly 200,000 students and staff still remained on it. The recycling company said it was unaware the servers contained personal information and “the college did not request data-wiping services,” the report states. The commissioner found “the college had taken reasonable steps to prevent a similar incident.”
Full Story