What is a data breach?
We speak of a data breach when
someone has access to privacy-sensitive information that does not concern them.



12 common examples:



A stolen or lost laptopA stolen or lost telephone or iPadA lost USB stick containing personal dataAn email with sensitive personal information that was sent to the wrong person An email with an attachment consisting of a list of personal data that was sent to the wrong personA folder or document on SharePoint or OneDrive containing sensitive information about individuals or lists of personal data that are shared with the wrong individualAn information system that allows you to access data that are not intended for youA printout with an overview of (sensitive) personal data that was not collected from the printerLists or overviews of personal data of students or staff on public, free platforms such as DropboxA medical certificate from a student or employee that ends up in the wrong placeSomeone with a falsified or hacked account accessing your or anyone else's informationRansomware or malware preventing you from accessing your files.



 What are personal data? 



All information that can be
traced back to a real person.



 How do I know when to report a data breach?



Perform this simple test: 



 Would you condone random people receiving this information on you?If yes, do you believe that all your students or colleagues would condone having their personal information shared with strangers? 



 If it concerns personal data and the answer to either question is no, you must report the (suspected) data breach. 
Do you have any
doubts whether it is in fact a data breach?
Report
in case of doubt!