Outcomes - Selected Case Summaries
Categories
HR system reports are sent to incorrect Ministry
Decisions | 23 May 2023
An automated report from a Cayman Islands Government HR system was incorrectly disseminated to the wrong ministry. The government portfolio was made aware of the breach when a chief financial officer advised they received an incorrect HR test report as part of a pilot program, 4 hours after the report was generated. The report included information on 9 employees, such as banked time liability calculation for ministry employees, employee names, titles, departments, and hourly rates which involved information on a total of 21 employees.
The portfolio reported the breach to the Ombudsman, and advised the technical problem was resolved within one day of the breach occurring. Upon review, we determined that the initial 9 employees should have been notified within the statutory timeframe of 5 days. The portfolio was urged to ensure the statutory notification period is adhered to in the future.