Stay up to date with notifications from The Independent

Notifications can be managed in browser preferences.

University of Greenwich launches investigation after student details leaked online in ‘breach of Data Protection Act’

Details reportedly leaked include names, addresses, dates of birth, mobile phone numbers, signatures and some students' mental health information

Aftab Ali
Student Editor
Wednesday 17 February 2016 07:15 EST
Comments
Hundreds of students' personal details were uploaded onto the university's website, a BBC investigation has found
Hundreds of students' personal details were uploaded onto the university's website, a BBC investigation has found (PA)

Your support helps us to tell the story

From reproductive rights to climate change to Big Tech, The Independent is on the ground when the story is developing. Whether it's investigating the financials of Elon Musk's pro-Trump PAC or producing our latest documentary, 'The A Word', which shines a light on the American women fighting for reproductive rights, we know how important it is to parse out the facts from the messaging.

At such a critical moment in US history, we need reporters on the ground. Your donation allows us to keep sending journalists to speak to both sides of the story.

The Independent is trusted by Americans across the entire political spectrum. And unlike many other quality news outlets, we choose not to lock Americans out of our reporting and analysis with paywalls. We believe quality journalism should be available to everyone, paid for by those who can afford it.

Your support makes all the difference.

The University of Greenwich has apologised to students and announced it will be conducting an investigation after personal details about hundreds of students were posted online in an “apparent breach of data privacy laws.”

In an investigation undertaken by the BBC - which was approached by a student who said details could be accessed via a simple Google search - students’ details, including names, addresses, dates of birth, mobile phone numbers, and signatures were all uploaded to the university’s website.

As well as this, the site reported how, in some cases, medical details - including mental health issues - were referenced as a way of explaining why some students had been falling behind on their coursework.

Also posted were minutes from the university department which oversees registrations and the progress of research students, as well as staff comments regarding student progress.

In one case, BBC News reported how one Middle Eastern student “was put at great risk” after it was disclosed the student had a sibling who was fighting in an army in the region, where references were made to “an asylum application.”

In an email to the Independent, university secretary Louise Nadal said she was “very sorry” that personal information about a number of postgraduate research students has been accessible on the university web site. She added: “This was a serious, unprecedented error, in breach of our own policies and procedures. The material has now been removed.

“We are now acting urgently to identify those affected. I will be contacting each person individually to apologise and to offer the support of the university.

“At the same time, I am also conducting an investigation into what went wrong. This will form part of a robust review, to make sure that this cannot happen again. The findings and recommendations of the review will be published.”

Ms Nadal also added the university is “committed” to protecting confidential data, adding: “We are co-operating fully with the Information Commissioner and will take all steps necessary to ensure we have the best systems in place for the future.”

An another email from the Information Commissioner’s Office - responsible for the enforcement of the Data Protection Act as well as for Freedom of Information - a spokesperson said: “We’re aware of an incident at Greenwich University and are making enquiries.”

According to a legal expert who spoke with BBC News, the university could face a financial penalty of up to £7.8m under new rules which look set to be adopted in Brussels next month.

Join our commenting forum

Join thought-provoking conversations, follow other Independent readers and see their replies

Comments

Thank you for registering

Please refresh the page or navigate to another page on the site to be automatically logged inPlease refresh your browser to be logged in