Privacy Protection Issue Reported in the University of Turku Electronic Application Form for Extension to Study Time
An error was noticed in an electronic data system of the University of Turku in late March, allowing signed in users of the service to have access to other users’ data. The error has been fixed, and the users of the system have been notified about it.
An error was identified in the electronic application form for extension to study time in March. The error gave the applicants access to read each other’s forms. The electronic form in question is used to process applications for extension to study time at the University. The applications for extension to study time may include sensitive information.
There were altogether 3,051 applications in the system during the occurrence of the error. The error occurred between 8 November 2021 and 29 March 2022. According to the University's assessment, altogether 21 forms had been opened without permission during this period.
The error has been fixed and the users of the system have been notified about the issue. The Data Protection Officer has also been informed of the privacy protection issue.
More information:
Data Protection Officer of the University of Turku Onerva Steudle, tietosuoja@utu.fi, tel. +358 29 450 3009