The loss of personal information belonging to millions of Ontario voters earlier this year shows that even good privacy policies can be useless if they’re not followed.Canada’s Information and Privacy Commissioner, Ann Cavoukian, released a new report that calls on organizations to beef up the enforcement and understanding of their privacy policies after the breach. In April, Elections Ontario discovered a major privacy breach when two memory sticks containing the names, addresses and birthdates of some 2.4 million voters were lost. The information also indicated whether they voted in the last election. Cavoukian previously found that the staff who lost the USB keys didn’t encrypt the files because they didn’t know what encryption meant. Her report makes seven recommendations to improve privacy protection at any organization, including developing privacy education and awareness training programs. It also says organizations should have a protocol in place to deal with a possible privacy breach that includes notifying affected people as soon as possible.
Read more