Security and Privacy Risks

When handling personal information for those in our care, be mindful at all times. Risks to the security of personal and sensitive information include practices such as:

• Leaving files containing sensitive information in a public place
• Forgetting a laptop on the bus or leaving it in an unlocked car
• Shredding a document before it is scheduled to be destroyed
• Allowing “shoulder surfing” where someone watches over a person’s shoulder to observe and gather information

Examples of Information Incidents

• Loss or theft of electronic devices (computer, cell phones, USB sticks) containing personal information
• Loss or theft of paper records and files
• Correspondence where information was disclosed in violation of the five sharing principles
• Letters, texts, or emails sent to the wrong person
• Misfiling an individual’s records into another individual’s file
• Disclosing personal information to someone without consent of the individual or the legal authority to do so
• Storing records on a database located outside of Canada
• Backing up a device (computer or phone) to a “cloud”
• Having a person’s smart watch or Fitbit sync to the caregiver’s cell phone

Although CLBC privacy breaches due to phishing and hacking are not that common, as a service provider, you must be cautious. Do not open any email or attachment that looks even remotely suspicious.