RCMP thumb drive with informant witness data obtained by criminals watchdog CBC News

pThe RCMP lost a USB key containing personal information about victims witnesses and informants and later learned it was being offered for sale by criminals the federal privacy watchdog saysppA detailed report from the Office of the Privacy Commissioner of Canada reveals the RCMP told the watchdog about the breach in March 2022 prompting a lengthy investigationppThe RCMP determined that the unencrypted storage device contained the personal information of 1741 people also including subjects of interest informants police officers and civilian employeesppThe RCMPs investigation also established that only some of the documents on the device were password protected and that the device itself was not encrypted nor password protected the privacy watchdogs report saysppThe Mounties learned from a confidential source three weeks after the loss that the data on the device was being offered for sale by members of the criminal communityppGiven the nature and sensitivity of the information that the RCMP handles on a daily basis our office would have expected the RCMP to have strict security measures in place to safeguard its information holdings the privacy commissioners report saysppWe also would have expected for those measures to be stringently monitored and that the RCMP would take prompt action where noncompliance whether accidental or not is discoveredppPrivacy Officer Philippe Dufresnes office found the RCMP violated the Privacy Act given that the personal information of individuals was disclosed without their consentppThe privacy watchdog also concluded that RCMP personnel failed to report the loss of the USB storage device to the forces authorities in a timely mannerppHowever once aware of the breach the RCMPs notification to affected individuals and the steps taken to manage the risk of further harm to them were generally appropriate in the circumstance the report saysppFinally Dufresnes office found the RCMP failed to take appropriate measures to safeguard the personal informationppThe privacy watchdog recommended the RCMP adopt strict security measures for the use of USB storage devicesppThis included measures not only to ensure that only approved USB devices are used but also audits to confirm that devices are returned when no longer needed as well as additional training the report saysppThe commissioner reports that the Mounties agreed in principle to the recommendations but did not commit to implementing them within a specific timelineppRCMP spokesperson Robin Percival said Monday the force initiated a review of its security and privacy policies as well as its awareness program to ensure employees were reminded and sensitized of their continual responsibilities to protect sensitive informationppThe program also addresses the immediate actions to be taken in case of a security breach Percival said in a written responseppThe RCMP remains committed to preventing the use of unauthorized and unencrypted USB storage devices and to implementing appropriate measures and solutions across the country she addedppAudience Relations CBC PO Box 500 Station A Toronto ON Canada M5W 1E6 ppTollfree Canada only 18663064636ppIt is a priority for CBC to create products that are accessible to all in Canada including people with visual hearing motor and cognitive challengesppClosed Captioning and Described Video is available for many CBC shows offered on CBC Gemppp