Data security breach

Examples of personal data security breaches include:

• sending sensitive or confidential information by unsecured email
• mailing personal data to the wrong person
• a lost or stolen computer, data storage device (such as a USB drive) or mobile device
• hacking or malware
• cyber attack.

A data breach or suspected data breach in the University's operations can be reported with a low threshold. Based on your contact, we will determine whether a data security breach has occurred and take appropriate action.

You can report a data security breach or a suspected security data breach to the University's Data Protection Officer: dpo@utu.fi.

Do not destroy the information you receive or find! The documents or storage medium must be returned to the University for the inquiry and any necessary action. For more detailed return instructions, please contact the University's Data Protection Officer.

If you are affected by a personal security data breach

We will report a personal data security breach to the supervisory authority, the Office of the Data Protection Ombudsman, if the security breach may pose a risk to the rights and freedoms of natural persons.

We will also notify the data subject, i.e. the person whose data the breach concerns, if the breach is likely to pose a high risk to their rights and freedoms.

In the notification, we describe, among other things, the likely consequences of the personal data breach and the actions the University has taken or is taking as a result of the security breach. We also provide guidance on how a victim of a data security breach can reduce the likelihood of their personal data being misused.

More information

Guideline from the Office of the Data Protection Ombudsman: Have you been affected by a personal data breach?

A guide on Suomi.fi service: My personal data has been stolen or leaked