Everyone is responsible for reporting if personal data have fallen into the wrong hands (deviation) (datatilsynet.no)(NO).

Examples of incidents to report:

• E-mails and attachments sent to the wrong address
• Erroneous disclosure or publication
• Lost equipment (mobile phone, laptop, tablet, notes etc.)
• Faults in access rights, equipment or software that may weaken security
• Lacking, ineffective or non-compliance with procedures

The severity of an undesirable incident varies depending on whether it concerns information about a few or many people, and whether it concerns special categories (sensitive data).

Check with your place of study or work how undesirable incidents or deviations shall be reported.

Read more about reporting of undesirable incidents (deviations) on sikresiden.no.