Privacy breaches can occur in various ways, such as when
- unauthorised individuals gain access to health information about employees or students
- sensitive personal data about participants or informants in research projects is leaked
- information about students or employees registered in UiA's IT systems is outdated, incorrect or incomplete
- data about informants or participants in research is used for purposes not consistent with their consent
- employees register, modify or delete student information in UiA's IT systems without necessary authorisations
- surveillance cameras are installed in or around university buildings without adequate justification
- managers gain access to employees' or students' personal storage areas or personal email communications without necessary rights
- UiA publishes detailed information about employees or students on its websites without the consent of those involved
Common to these and other potential privacy breaches is that the data controller (UiA) handles personal data in a manner that deprives the data subject of the right to determine and control what happens with their information.
Individuals subjected to privacy breaches can claim compensation from the data controller (UiA) if they have suffered economic or non-economic damages as a result of the breach.
In cases of serious privacy breaches, the data controller (UiA) may be fined by the Norwegian Data Protection Authority or reported to the police.
If you suspect a privacy breach, report the issue here.