13 March 2021. Into the public sphere appear some information that personal data of students of the Cilnius College could be leaked.
If the theft really happened it shall be detected by a police investigation. The circumstances of the accident are also the object of investigation by the National Cyber Security Center, which supervises the area. The Vilnius College is still clarifying the circumstances of the accident.
The Supervisory Authority, the State Personal Data Protection Inspectorate (SDPI), has received an initial notification by the Vilnius College on a possible security breach of personal data, as planned by the General Data Protection Regulation. Actually, the SDPI is clarifying the provided information and it will decide if started an investigation on the implementation of technical and organizational measures for the processing of personal data by the Vilnius College.
Due to publicly available information on a possible accident, a number of people turn to SDPI for consultations. We would like to point out that the situation of the responsible institution is being clarified, so there is no need for a separate request of persons to the SDPI for the assessment of the situation.
If further circumstances of this incident become clear or SDPI decides to conduct an investigation, the information will be integrated.