File breach at electronic spy agency prompts mandatory privacy training

Canada’s electronic spy agency introduced mandatory privacy awareness training for all employees in March following an internal breach involving personal information.

OTTAWA — Canada’s electronic spy agency introduced mandatory privacy awareness training for all employees in March following an internal breach involving personal information.

When Greta Bossenmaier became chief of the Communications Security Establishment in February, the ultra-secret eavesdropping outfit was under intense public scrutiny over alleged spying on citizens.

But less than two months into the job, Bossenmaier was informing the spy agency’s staff of a privacy violation inside its own walls.

“I seriously regret that we are in this situation and never want it to be repeated,” Bossenmaier told employees in a March 20 email. “As such, we must use it as a learning opportunity so that we can prevent any further incidents from occurring.”

The Ottawa-based CSE, which employs about 2,000 people, uses highly advanced technology to intercept, sort and analyze foreign communications for information of intelligence interest to the federal government.

Documents leaked in 2013 by former American spy contractor Edward Snowden revealed the U.S. National Security Agency — a close CSE ally — had quietly obtained access to a huge volume of emails, chat logs and other information from major Internet companies, as well as massive amounts of data about telephone calls.

As a result, civil libertarians, privacy advocates and opposition politicians have demanded assurances the CSE is not using its extraordinary powers to snoop on Canadians. The agency insists it scrupulously follows the law in protecting Canadians’ privacy.

On July 31, 2014, someone notified CSE’s corporate security officials that a file containing personal information related to security clearances was mistakenly given public-access permission markings, making it accessible to CSE personnel, according to Bossenmaier’s email to staff.

An edited version of her classified message was obtained by The Canadian Press under the Access to Information Act.

By November an internal probe determined the breach had potentially affected the personal information of 146 people. However, further examination led the agency to conclude in January that the sensitive personal information of just five individuals — four CSE employees and one member of the public — was deemed to be at risk.

“The investigations determined that the incident was caused by a combination of technical and human errors,” Bossenmaier told staff. “Several of CSE’s existing security safeguards mitigated the risk of the information being further compromised or removed from CSE premises.”

CSE spokeswoman Lauri Sullivan declined to elaborate on the nature of the information.

The CSE advised the Treasury Board Secretariat, the federal privacy commissioner and the watchdog that keeps an eye on the spy agency.

In February and March, the CSE informed the five individuals, Sullivan said in written answers to questions. “This involved extensive co-ordination between CSE’s Privacy Office, senior management, security, labour relations, and CSE’s Counselling and Advisory Program.”

The CSE ushered in a new policy last September on administrative privacy breaches, asked managers to review access permissions on remaining documents, and introduced mandatory privacy awareness training for all staff in March.

The federal privacy commissioner’s office told the CSE In April that the steps taken were reasonable and that no further action was required, Sullivan said.

Valerie Lawton, a spokeswoman for the commissioner’s office, confirmed that it was aware of the incident, but added the Privacy Act prevented her from saying more.

Bossenmaier sent the March 20 email to staff shortly before a brief account of the breach was tabled in Parliament as part of a broader written answer to a formal question about federal data lapses from New Democrat MP Charlie Angus.

Sullivan said the timing of Bossenmaier’s message “was directly related to completing the process of notifying the five impacted individuals.”

In her note, Bossenmaier urged staff to review the new privacy protocol, take the mandatory training, exercise care when assigning access permissions to documents, remain alert to any “serious anomalies” in information management, and immediately report any problems.

“We all have a role to play in safeguarding information, and I am reminding you to apply it seriously to all information held by CSE.”

Just Posted

Ella Stoner, five, is ready to cut off her hair and donate it to A Child’s Voice Foundation. (Photo by Lauren Stoner Photography)
Central Alberta girl to donate her ‘princess hair’ to A Child’s Voice Foundation

A five-year-old girl from Rimbey has never had a haircut before. Now,… Continue reading

Asymptomatic testing will now be available for "priority groups" who are most likely to spread the COVID-19 virus to vulnerable or at-risk populations. File photo by THE CANADIAN PRESS
Alberta adds 1,195 new COVID-19 cases Saturday

Red Deer has dropped to 760 active cases

Lacombe-Ponoka MLA Ron Orr
Central Alberta MLAs comment on UCP members kicked out of caucus

A pair of central Alberta MLAs have commented on the two United… Continue reading

Contributed photo
Johanna Hannaford: Central Alberta designer offers inclusive clothing

By Stephanie Rhodes Local designer Johanna Hannaford’s inclusive clothing creations are smashing… Continue reading

Red life-ring with splash
Started from the bottom: How a family business started and grew in central Alberta

By Carina Moran We started our business in the basement of our… Continue reading

Red Deer Mayor Tara Veer and several members of city council helped kick off the spring Green Deer cleanup campaign on Wednesday. Veer said city workers do their best to keep the city looking good, but need volunteer help to get rid of litter that has blown into bushes onto road sides over the winter. (Photo by LANA MICHELIN/Advocate staff)
Red Deer city councillors launch spring Green Deer campaign

Volunteers are needed to keep the city looking good

Vancouver Canucks' Zack MacEwen (71), Travis Boyd (72) and Jimmy Vesey (24) celebrate a goal against the Edmonton Oilers during third period NHL action in Edmonton on Saturday, May 15, 2021.THE CANADIAN PRESS/Jason Franson
Big third period lifts Vancouver Canucks to 4-1 victory over Edmonton Oilers

Canucks 4 Oilers 1 EDMONTON — Matthew Highmore scored twice in the… Continue reading

A vial of the Medicago vaccine sits on a surface. CARe Clinic, located in Red Deer, has been selected to participate in the third phase of vaccine study. (Photo courtesy www.medicago.com)
Canada’s vaccine rollout operation won’t miss a beat with new military leader: expert

DARTMOUTH — The sudden departure of the senior military officer in charge… Continue reading

Quebec Premier Francois Legault speaks during a news conference on the COVID-19 pandemic, Tuesday, September 29, 2020 at the legislature in Quebec City. THE CANADIAN PRESS/Jacques Boissinot
Quebec premier argues province has power to amend constitution in letter to Trudeau

MONTREAL — Quebec Premier François Legault has written a letter to Prime… Continue reading

A demonstrator stands in front of riot police officers during a banned protest in support of Palestinians in the Gaza Strip, in Paris, Saturday, May, 15, 2021. Marches in support of Palestinians in the Gaza Strip were being held Saturday in a dozen French cities, but the focus was on Paris where riot police countered organizers who said they would defy a ban on the protest, ordered on the grounds that it risked turning violent. (AP Photo/Rafael Yaghobzadeh)
Police fire tear gas on banned Palestinian march in Paris

PARIS (AP) — French riot police fired tear gas and used water… Continue reading

Photo by The Associated Press
NYC Pride parade bans police; Gay officers ‘disheartened’

NEW YORK (AP) — Organizers of New York City’s Pride events said… Continue reading

Welcoming cowboy boots at the historic and colourful Last Chance Saloon in the ghost town of Wayne near Drumheller, Alta., on Thursday, Sept. 19, 2019. The bar and hotel are up for sale. THE CANADIAN PRESS/Jeff McIntosh
‘It was a going concern’: Remaining bar and hotel in Alberta coal ghost town for sale

WAYNE, Alta. — Built during the First World War, it survived the… Continue reading

A letter from a bottle that washed up in New Brunswick in 2017 is shown in an undated handout photo. A team of researchers from Université du Québec à Rimouski are trying to solve the mystery of whether a letter in a bottle that washed up in New Brunswick in 2017 was indeed from a young victim of Titanic shipwreck or simply a hoax. THE CANADIAN PRESS/HO, N. Beaudry, UQAR *MANDATORY CREDIT*
Real or hoax? Quebec scholars probe mystery letter allegedly from Titanic passenger

MONTREAL — Researchers from Université du Québec à Rimouski are trying to… Continue reading

Minister of Transport Marc Garneau takes part in a press conference on Parliament Hill in Ottawa on Tuesday, Nov. 26, 2019. Advocates, experts and opposition MPs say correspondence showing close communication between the federal Transport Department and the Canadian Transportation Agency regarding passenger refunds throws into question the independence of the CTA, an arm’s-length body. THE CANADIAN PRESS/Sean Kilpatrick
Emails reveal close communication between government, transport regulator on refunds

OTTAWA — Advocates, experts and opposition MPs say correspondence showing close communication… Continue reading

Most Read