The social welfare committee had decided to apply for a specially appointed guardian for a teenager. When the minutes of the committee's meeting were published on the municipality's website, they included the entire case concerning the child.
The confidential information was publicly accessible for 17 hours before an outsider contacted the municipality and it was removed, the social services' IT strategist says.
The incident will be reported under Lex Sarah and has been reported to the supervisory authority IMY as a personal data breach under GDPR.
“We truly regret what has happened and fully understand that it causes concern for those affected,” social welfare manager Eva Börjesson Öman tells the newspaper.
What do you think?