The Limited Times

Now you can see non-English news...

Serious information security incident at an educational institution in Bat Yam: Sensitive details about dozens of minors revealed | Israel today

2022-01-04T08:37:34.581Z


According to the suspicion, the institution irresponsibly and openly dumped huge amounts of personal files of local students that included a lot of sensitive information. • Following the evacuation of the Privacy Protection Authority, the exposed materials were collected.


Details of minors, visible to all:

The Privacy Protection Authority in the Ministry of Justice began this morning (Tuesday) investigating a serious information security incident that took place at an educational institution in Bat Yam, in which personal and sensitive information about the institution's students was revealed.

The investigation of the incident began due to a report received from a private source, which revealed that the institution dumped huge amounts of students 'personal files including extensive personal information including minors' photos, questionnaires, psychological assessments and more, openly and available to any passerby.

Following the report, received by the Privacy Protection Authority at the Ministry of Justice, which dumped huge amounts of personal files of students studying at the institution and including personal information such as photos of students, questionnaires, psychological assessments and other personal materials, the authority turned to education and municipal officials urgently.

Following the appeal, the educational institution acted to handle the incident and collected the exposed materials.

However, so far no serious security incident has been reported, as required by the Privacy Protection Regulations.

At the event, the Privacy Protection Authority emphasized that any body that administers or holds personal information about people, certainly an educational institution that holds sensitive information concerning students and minors, should ensure that it acts to maintain and protect the information in accordance with its privacy protection regulations.

It should also be noted that the security obligations that apply to information in a database are also valid when it comes to a printout of the information from the database, especially when it comes to sensitive information that is also subject to a duty of confidentiality.

The responsibility for the security of the information rests with any body of the administrator or holder of information, in order to protect the personal information of the people on whom he holds information, including with regard to the processes of archiving, eradication or destruction of such information.

Failure to comply with the provisions of the Privacy Protection Regulations may expose the body to administrative and criminal enforcement proceedings by the Authority and even to civil claims by the persons about whom the information was leaked, in addition to harming the reputation of the infringing body.

It should be noted that the Authority works to strengthen cooperation with all government ministries, including the Ministry of Education, to strengthen the protection of privacy in the organization, including the implementation of privacy design mechanisms in the early stages of new projects promoted by it.  

The Authority urges citizens to continue to update it on serious information security incidents, including information leaks, vulnerabilities or vulnerabilities in websites, apps or services that include personal information, so that it can act and address these incidents in order to reduce public privacy breaches.

The authority will be contacted by sending an e-mail to ppa@justice.gov.il, stating "Reporting an information security incident" in the subject line.

Were we wrong?

Fixed!

If you found an error in the article, we'll be happy for you to share it with us

Source: israelhayom

All news articles on 2022-01-04

You may like

Trends 24h

News/Politics 2024-03-27T16:45:54.081Z

Latest

© Communities 2019 - Privacy

The information on this site is from external sources that are not under our control.
The inclusion of any links does not necessarily imply a recommendation or endorse the views expressed within them.