Skip to content

Tag: data management

Published on

The February meeting of the Gabriola Fire Protection Improvement District trustees saw some disagreements, but on the whole proceeded civilly and efficiently. We are summarizing matters and providing transcripts only where there are areas of contention or details that we believe are of interest.

Signal to noise ratio (good/bad/ugly) = good

Relevant content in the February 13th edition of the Sounder:

Table of Contents

Call to order, housekeeping items.

FINANCIAL REPORT

COMMITTEE REPORTS

  1. Finance Committee
  2. Communications Committee
  3. Hiring Committee
  4. Website Committee
  5. Freedom of Information Committee
  6. Policy and Bylaw 97 Review Committee
  7. HR Committee
  8. Meeting Safety
  9. Performance Management Framework
  10. Privacy Breach Committee

REPORTS

BUSINESS ARISING AND UNFINISHED BUSINESS

  1. Privacy Management Program
  2. Bylaw XXX: Fire Department Establishing Bylaw
  3. Records and Information Management Bylaw

NEW BUSINESS

  1. Disclosure of Conflict of Interest
  2. Election
  3. Adoption of Code of Conduct
  4. Governance

QUESTION PERIOD

...continue reading "2026-02 GFPID meeting"

Published on

The November 12th issue of the Sounder contains an ad notifying Gabriolans about a privacy breach, reproduced below. Based on what it says, it appears that an office computer that had not been properly wiped somehow ended up in the hands of a community member, and has now made its way back to the GFPID. Clearly someone made a mistake somewhere.

Presumably this is the privacy breach referenced during the New Business part of the November 5th meeting. Ironically, during that meeting there were disagreements as to whether Microsoft’s OneDrive or a self-managed server was the most secure way to protect data.

This incident illustrates the common adage that the biggest vulnerability any organization has is not technology, but people.

We commend the GFPID on its transparency with regard to this issue. We also look forward to updates as to how this happened and what remedial measures are being put into place, in terms of training, policy and practice, (perhaps including compliance checklists) to ensure that such data security breaches do not happen again.