B.C parent raises flags over school district privacy breach

Up to 1,000 Chilliwack student records could have been compromised in 10-year data breach

About 1,000 past and present students in the Chilliwack School District may have been affected by a privacy breach that took place between 2005 and 2015.

A letter explaining the breach was published by the district on their website on Dec. 22, 2017, but the information has not come up in any recent public meetings. It happened through the district’s participation in research with a not-for-profit group called Educational and Community Supports, a program of the University of Oregon.

Parent Brian Mielke has been attempting to hold the district accountable for the breach for many years, with the help of the Office of the Information and Privacy Commissioner (OIPC). He cottoned onto the breach when delving into his own child’s records several years ago.

“I wanted a copy of my child’s student file,” he said. “I had to do an FOI request to get the file and it took them maybe about four or five months to respond — they went past the period and had to get permission (from OIPC) to extend it.”

When he finally received the data package, it had been heavily redacted by lawyers, but many students’ names were inadvertently missed. Seeing this as a breach of privacy for those students, he thought he’d investigate the document further. He noticed an URL at the bottom of the printout, pinged the IP for the server, and found it to be a server in Oregon.

“I immediately became concerned,” he said. “There are very clear privacy laws of data not crossing the border.”

Through further research he found the connection between School District 33 and Educational and Community Supports was for the use of a program called Positive Behaviour Information System (PBI-SWIS). This research was being used to gather information to develop a technique known as positive behaviour support for behaviourally challenged students. Data was sent across the border for the program, and the school district paid a licensing fee for the software.

In their public letter, the district states the program is used to track behavioural incidents.

“PBI-SWIS was used to gather information about the type and frequency of school based behavioural interventions on an individual and aggregated basis. Only information pertaining to students receiving behaviour support or intervention was affected,” the district says. “We estimate that the number of students affected was approximately 1,000.”

They also have been working with the Office of the Information and Privacy Commissioner to respond to privacy concerns and say there is “no information to suggest that any of this research information was used or disclosed or any purpose other than the university research.”

The OIPC confirms they’ve been working on the matter, but declined to speak about any details.

Mielke says the breach of information is also a breach of trust. He searched the internet for examples of people in the education field using Chilliwack information for their own purposes, publicly, and was able to find several examples. One of them was a PowerPoint presentation about First Nation students at a Chilliwack elementary school.

There are specific sections of the Freedom of Information Act and Protection of Privacy Act that school districts must adhere to. The letter from the school district admits that this partnership contravened that act, but does not spell out exactly how. Mielke says it was through violation of sections 30.1 (transferring student data outside of the country) and 35 (not having an agreement in place to do so).

The district says despite the breach, they feel confident that no identifying student data was compromised.

“All information shared with the researchers was stripped of student identifiers immediately upon receipt by the researchers and we have also confirmed with the researchers that all personally identifiable records have been permanently destroyed,” their letter states. In addition, they say, researchers involved were bound by confidentiality contracts.

The Chilliwack School District said that they believe the risk of any adverse impact on individual privacy is minimal. However, any individual who has questions about this matter should contact Ms. Tamara Ilersich, Director of HR at tamara_ilersich@sd33.bc.ca for more information.

Privacy Notification.docx by Jess Peters on Scribd

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

LETTER: Verbal attack on foreign workers disturbing

Racist and derogatory comments on social media disheartening and disappointing to Maple Ridge native

LETTER: How about a fashion contest for COVID face gear

Not trying to make light of the pandemic, but how about a community competition, no age limit

ON THE PAGE: FVRL Express launches Monday

It’s as easy as click, pick, and go at Maple Ridge and Pitt Meadows libraries starting next week

LETTER: Doctor calls foul on plea for hazard pay

Dr. Walton doesn’t believe he deserve any thing more for working during COVID

Virtual gala brings dinner to the door and money to locals in need

Maple Ridge Community Foundation is holding a ‘Night In Gala’ fundraiser on June 13

11 new COVID-19 cases in B.C. as top doc urges caution amid ‘encouraging’ low rates

Dr. Bonnie Henry also announced that two care home outbreaks would be declared over

Facing changes together: Your community, your journalists

Thanks for helping The News to continue its mission to provide trusted local news

Police watchdog investigating death of man in Delta

Independent Investigations Office asking for witnesses to May 29 incident at Tsawwassen ferry terminal

Surrey mayor’s party under fire for ‘sickening’ tweet accusing northern B.C. RCMP of murder

Mayor Doug McCallum says tweet, Facebook post ‘sent out by unauthorized person’

Father’s Day Walk Run for prostate cancer will be virtual event this year throughout B.C.

The annual fundraiser for Prostate Cancer Foundation BC has brought in $2.5 million since 1999

Dr. Bonnie Henry announces official ban on overnight kids’ camps this summer

New ban comes after talking with other provincial health officials across the country, Henry says

Senior man in hospital after unprovoked wolf attack near Prince Rupert

Conservation officers are on site looking for the wolf

VIDEO: NASA astronauts blast off into space on SpaceX rocket

Marks NASA’s first human spaceflight launched from U.S. soil in nearly a decade

‘I knew what he wanted’: Kootenay man spends hours in tree as black bear patrols below

Francis Levasseur is no stranger to the outdoors, but a recent run-in with a bear caused quite a scare

Most Read