Personal Data Breach Notification

On 1 April 2025, we noticed an error in the access rights to the network drive folder of LUT Universities' study counselling psychologist services. In addition to the psychologists, other study services staff have had access to the folder due to the error. Study counselling psychologists noticed the error in connection with the orientation of a new psychologist.

The network drive folder was introduced in December 2020. In connection with the introduction of the folder, older data of study counselling psychologists was also transferred there from its previous storage location. The folder contains personal data of students of LUT University and the LAB University of Applied Sciences who have used study counselling psychologist services, such as personal data forms, appointment records, recommendations for individual study arrangements, documents related to reading tests, and client lists. The data retention period is eight years.

Log data is available from 5 January 2024 onwards. Despite our investigations, we have not found out what caused the error.

Due to the incorrect access rights, the personal data in the folder has also been available to study services employees who do not need to process such data for their work. However, all users who have had access to the folder are our own staff members and are bound by a confidentiality obligation.

The log data does not indicate that anyone other than study counselling psychologists have viewed the personal data in the folder. We have not found any signs of misuse of the data either.

On the day we discovered the error, we immediately restricted access to the folder to study counselling psychologists only. We have also reported the personal data breach to the Office of the Data Protection Ombudsman.

We sincerely apologize for the error.

We kindly ask you to submit any inquiries to:

Data protection: dataprotectionlut [dot] fi
Study counselling psychologists: opsylut [dot] fi