The Canada Border Services Agency (CBSA) lost a refugee claimant’s personal information that was on a USB key, a portable memory device. The information was encrypted, but a CBSA officer had written the password on a Post-it note wrapped around the device. The incident highlights past criticisms of CBSA’s commitment to safeguarding personal data.