The Information and Privacy Commissioner, Michael Harvey, has released an Audit Report on Access Controls at the Royal Newfoundland Constabulary under authority of the Access to Information and Protection of Privacy Act, 2015.
The purpose of this Report was to audit the electronic access controls, acceptable use, and staff training on the electronic systems to which the RNC have access.
The objectives of the audit were to:
- examine access to personal information in various databases held or accessed by RNC staff;
- examine training provided to staff regarding acceptable use of access privileges;
- review the extent to which RNC policies and practices reflect legislative requirements;
- identify any risk factors in the protection of personal information; and
- make recommendations to strengthen RNC policy and practice.
The Report outlines legislative requirements, presents findings from the audit and discusses key observations and recommendations.
The OIPC encourages every public body to review the standards discussed in this Report, to conduct internal reviews to determine its own level of compliance and to contact the OIPC if our assistance is needed.
To view the Report in its entirety, go to the Audit and Compliance Program page, at www.oipc.nl.ca/reports/audit.
Quote
“This audit represents an example of positive, constructive engagement between my Office and a public body. Over the course of the audit, the RNC were already taking steps to improve their practices, and their response to our recommendations is encouraging, as it lays a course for continual improvement and adoption of best practices.”
Michael Harvey
Information and Privacy Commissioner
-30-
Media contact
Sean Murray
Director of Research and Quality Assurance
709-729-6309