The remedy to a pre-Christmas privacy breach that compromised the personal data of 45,000 people on provincial disability support payments shows there are âa lot of gaps in the system,â says New Democrat MPP Lisa Gretzky.
Her comment Tuesday came as Ontarioâs information and privacy commissioner closed an investigation into the incident last Dec. 20 in which a spreadsheet with names, client identification numbers, and email addresses were mistakenly emailed to 103 of the disability payment recipients by a Ministry of Community and Social Services employee.
A new âcomprehensive privacy training planâ is being developed for 1,600 staff who handle personal information at the ministry, along with a password access system for spreadsheets and encryption for any now being sent by email, the commissionerâs office said, calling the measures âsatisfactory.â
A spokeswoman for new Community and Social Services Minister Todd Smith would not specify the expense of the changes in the wake of the breach, which was reported to the commissionerâs office on Dec. 24.
âThe costs youâve inquired about are minimal and well within the ministryâs operating budget,â Christine Wood said in an email. âThe steps taken were within the scope of the regular allocated operating budget, and utilized existing resources.â
No home addresses or financial details of Ontario Disability Support Plan clients were revealed as a result of the error.
The breach of information from the ODSP could be the subject of a class-action lawsuit against the province, for which Toronto lawyer Ron Podolny of Rochon Genova LLP is now seeking certification.
âItâs working its way through the courts,â Podolny told the Star. âWeâve had inquiries from hundreds of people.â
Gretzky (Windsor West) said âthere are still people out there who are very concerned about their personal dataâ revealed in the breach, which occurred when cabinet minister Lisa MacLeod was in charge of the portfolio. She apologized at the time, describing the problem as a âclerical error.â MacLeod was moved to the tourism ministry in a recent shuffle by Premier Doug Ford.
The New Democrat said she was shocked that the sensitive information was so easily emailed out in error.
âYou would think all along they way they would have been training staff,â Gretzky said. âThere should always be standard policies and procedures in place ... so that something like this doesnât happen again.â
The December email was sent to notify recipients of improvements to online information about ODSPâs âMyBenefitsâ portal. ODSP recipients later received letters notifying them of the privacy breach, and ministry staff contacted those who received the spreadsheet and asked them to confirm they had deleted the email that contained it.
Rob Ferguson is a Toronto-based reporter covering Ontario politics. Follow him on Twitter: @robferguson1
Gloss