Warsaw University of Life Sciences: Insufficient technical and organisational measures to ensure information security

Theft of a private notebook belonging to a university employee who also used this device for business purposes and on which personal data of candidates for study at SGGW was contained for recruitment activities.

GDPR Articles: Art. 32 GDPR
Industry: Public Sector and Education