News
The Directorate General of Education and Science Statistics (DGEEC) sent PhD students a 'mandatory' survey which allowed, via a hypertext link, improper access to the confidential responses of another colleague. According to the DGEEC, the National Data Protection Commission, in accordance with the requirements of paragraph 1 of Article 33 of the General Data Protection Regulation, was notified of this problem as soon as it was detected by a researcher who received the email in question. Speaking to Observador, Ana Rocha, Senior Associate at CCA's Department of Technology, Media and Telecommunications, analyses the data breach issues raised by this case.
"These technological errors can arise due to security breaches. However, sometimes it is simply a human error", says CCA Senior Associate, also recalling that "there are no secure systems".
According to Ana Rocha, if the injured party considers that he should be compensated, he can bring an action against the public entity - "the injured person can bring an action against the data controller (...) whoever has suffered material damage has the right to receive compensation for the damage suffered".
- Read Full Article
- Observador