The University failed to apply the appropriate organizational and technical measures to ensure proper data security. As part of a research project on male rape, information about police reports, containing names, ID numbers, contact details, health information, and details about the sex lives of data subjects, as well as information related to the suspected crime, were stored in the cloud of a U.S. service provider. The Swedish DPA notes that the cloud services don’t properly protect the sensitive data in a way fitting its significance. Moreover, one investigation report was sent to the Swedish police in an unencrypted form, and the responsible party did not document or report this incident to the DPA.
the university failed to apply the appropriate organizational and technical measures to ensure proper data security as part of a research project on male rape information about police reports containing names id numbers contact details health information and details about the sex lives of data subjects as well as information related to the suspected crime were stored in the cloud of a us service provider the swedish dpa notes that the cloud services don’t properly protect the sensitive data in a way fitting its significance moreover one investigation report was sent to the swedish police in an unencrypted form and the responsible party did not document or report this incident to the dpa
 university fail  apply  appropriate organizational  technical measure  ensure proper data security  part   research project  male rape information  police report contain name id number contact detail health information  detail   sex live  data subject  well  information relate   suspect crime  store   cloud   us service provider  swedish dpa note   cloud service ’ properly protect  sensitive data   way fit  significance moreover one investigation report  send   swedish police   unencrypted form   responsible party   document  report  incident   dpa