BreachOfPrivacy
Decisions/Federal (Canada)/Privacy Act/Mechanical malfunction, compounded by human error, leads to data spill
Office of the Privacy Commissioner of CanadaPrivacy ActWell-founded
Flag of Canada

Mechanical malfunction, compounded by human error, leads to data spill

Organization: Human Resources and Skills Development Canada
Decision: Oct 5, 2010Published: Oct 5, 2010

This investigation concerned a data spill involving 11,900 forms mailed to applicants for the Guaranteed Income Supplement. A mechanical malfunction caused some applicants to receive forms destined for other individuals, including names, addresses, and Social Insurance Numbers. Human error by the overseeing technician, who failed to use detection mechanisms and notify management, compounded the issue. The Office found the complaint well-founded and recommended that the department enhance employee awareness of their obligations to protect personal information.

  • Adequacy of security safeguards for personal information
  • Role of human error in compounding a mechanical defect
  • Reporting obligations of employees regarding privacy breaches

Complaint well-founded — corrective measures ordered

The investigation found that the department failed to adequately protect personal information due to a mechanical defect compounded by human error, leading to a breach.

AI-generated summary for reference only. Always verify against the official decision ↗

Recommended action / remedy

The department was recommended to better sensitize employees to their obligations to safeguard personal information, and undertook to update employee knowledge of the Privacy Act and related policies.

Statutory provisions cited
  • Privacy Act

This summary is informational only and not legal advice.