[ad_1]
Contact the Data Protection Inspectorate
“In connection with this incident, the NSA asked the Queen Martha School to explain the circumstances of the incident in that activities were observed that exceeded the scope required to perform the duties of an administrator. Also, institutions are not open during business hours. The NSA will contact the State Data Protection Inspectorate regarding a possible violation when the authorized school administrator copied the data, possibly violating the scope of data processing required by it. Importantly, the published data was misappropriated in a way that had connections to the “mother school” system, according to the NSA report.
According to the agency, school leaders are legally and technically authorized to process personal data in the “school for parents” project. Directors can grant special administrator rights to IT professionals. The NSA is aware of all actions taken by a particular school employee to ensure maximum data protection. This is to ensure that administrators do not exceed their powers or process data for other purposes, or carry out redundant processing operations, etc.
“Each school, as a data controller, is responsible for the proper processing of data, including ensuring that authorized administrators process only the data necessary for the performance of their duties and only for the purposes for which they are entrusted.” the agency said.
The school says it found too much data.
The report distributed by Queen Martha’s School indicates that the IT administrator, using the official access and password provided by the National Education Agency and processing the data of Queen Martha School students in the system, noted that not only could he See your school, but also all Lithuanian students and teachers. names, educational institution, assigned email address).
“It was completely unexpected: to automatically assign MS Office 365 product licenses to Queen Martha School students, the IT administrator noted that instead of just over 700 students they see several hundred thousand,” explains Rita Meilūnaitė, principal. of communication of the educational institution.
About the data security vulnerability detected in email. The National Education Agency was immediately informed by email. At this time, the login information for the IT administrator of Queen Morta School is blocked and it is unclear if the data of the school’s students and teachers is secure.
“We do not understand that a representative of the National Education Agency said in a public comment that the data had been illegally copied and disclosed. This is not true, the IT administrator of Queen Morta School logged into the system with the details of Login provided officially and only performed actions allowed by the NSA The fact that the system has automatically added data for students and teachers from all schools alongside our students is a security gap that we hope will be addressed. Personal data has been disclosed. By contrast, the IT administrator at Queen Martha School acted as a citizen, was not silent, but immediately reported a possible data security breach, “says R. Meilūnaitė.
Ramūnas Karbauskis, president of the Union of Peasants and Greens of Lithuania, also reacted to this situation on Facebook.
“This time it is publicly announced that Queen Martha’s school may have stolen personal data. I hope that in this case, a commercial investigation of this inviolable family will begin and they will have to explain it to the public, especially children and parents, of whose data is being discussed ”, wrote R. Karbauskis.
Queen Martha’s school writes in a report to be applied to the court for R. Karbauskis’ speech.
“Today, Seimas member Ramūnas Karbauskis released defamatory information that undermined the company’s business reputation. This is not the first time that a company that acts with honesty and transparency is involved in a constant campaign of slander and political persecution by the “peasant” president and his subordinates. Therefore, today we decided to file a lawsuit and ask the court for the responsibility of this politician and compensation for financial damages for the degradation of commercial reputation, “says Jurgita Busilienė, principal of the Queen School Martha.
[ad_2]
