Thousands affected by information breaches this year
The Office of the Privacy Commissioner estimated that thousands of people were affected by personal information breaches in the first quarter of this year.
According to statistics released by the body yesterday there were five personal information breaches in total reported over the quarter but those breaches could have affected more than 3,000 people.
“The majority of the reported personal information breaches related to unauthorised disclosures of, or access to, personal information which were likely to adversely affect individuals,” the office said.
“Of the total personal information breaches received in Q1, four were concluded by the quarter end and one remains open.”
The report, the first quarterly report released by the office since the Personal Information Protection Act 2016 came into full effect, however, noted that some statistics included may be subject to change as more information becomes available.
The office said that organisations highlighted the challenge of measuring when a breach was likely to affect individuals while complying with the duty to notify those affected “without undue delay”.
It urged organisations to ensure that a privacy officer who can fulfil the role is designated, accessible policies and procedures are in place and training is conducted on compliance with the Act.
A recent report highlighted that more than 60 per cent of surveyed residents were unaware of what their rights were under Pipa legislation just before its inception.
An Omnibus Survey conducted on behalf of the Privacy Commissioner was presented in the House of Assembly on Friday as part of the commissioner’s Pre-Implementation Annual Report. It showed that 39 per cent or respondents were aware of their rights compared to 61 per cent who were not.
The survey involved 400 residents who were interviewed over the phone between November 27 and December 9 last year.
In January 2024, the office launched the educational campaign Road to Pipa to assist organisations to become compliant with the Act.
It said work would continue on educating the public this year.
There was also a major public engagement effort that included information sessions and media campaigns.
For the survey, interviewers asked Bermudians about the privacy rights they were aware of.
One quarter of participants mentioned the security and confidentiality of personal information and data, and 27 per cent listed consent before sharing personal information as a right.
More than 1 in 10 of those asked were aware of their rights to request deletion of personal information and to access personal information — 15 per cent and 13 per cent respectively.
A quarter of those asked were unsure about their specific rights under the Act despite saying they were aware of their rights generally.
Angie Farquharson, the Deputy Privacy Commissioner, wrote in the report that the commission would provide more guidance on the Act this year.
She said the office would further develop children’s programmes to educate young people and parents on digital safety.
Ms Farquharson said the office had prepared other organisations on how to abide by the Act.
She said organisations that used personal information should determine what information was necessary and advise people accordingly via their privacy notices.
Ms Farquharson added: “The evolving use of technology in Bermuda can present challenges in the privacy landscape on our island.
“Nevertheless, the rights of individuals under Pipa are unchanging and the office will uphold these rights stated in Pipa.
“These rights strengthen safety and protection of personal information.
“We will be the champions of individuals to control the use of their personal information.”
The report said there were 16,790 unique visitors to the www.privacy.bm website over 32,293 site sessions in 2024-2025, compared with 26,889 in 2023-2024.
• To read the Q1 statistice in full, see Related Media
You must be Registered or to post comment or to vote.
