Canadian Staples stores are failing to fully wipe customer data off returned laptops and storage devices before reselling them, thus violating Canada's privacy laws, the CBC News reports.
More than a third of the 149 storage devices tested by the Office of the Privacy Commissioner of Canada, including laptops and USB hard drives, still had customer data on them--despite undergoing a wipe and restore process to be readied for resale. Some of the lingering information was reportedly pretty sensitive, including things like tax and ID records and passport numbers.
"Our findings are particularly disappointing given we had already investigated two complaints against Staples involving returned data storage devices and the company had committed to taking corrective action," commissioner Jennifer Stoddart said in a press release. "While Staples did improve procedures and control mechanisms after our investigations, the audit showed those procedures and controls were not consistently applied, nor were they always effective, leaving customers' personal information at serious risk." … Read more