A report by 'Globes' reveals that the Privacy Protection Authority (PPA) has determined that the Ministry of Education violated the Israeli Privacy Protection Law. The Authority's decision follows a severe data breach in which sensitive details of thousands of students in special education were exposed.
According to the report, the data included various personal records and even classified medical information of approximately 21,000 students, which reached unauthorized hands due to technical and operational failures in the Ministry's information systems. According to the PPA's investigation, the primary cause of the leak was a digital form configured with open permissions. This incorrect setting allowed free access to the information, contrary to the standards required for securing databases containing sensitive data on minors and their medical status.
This breach relates to principles enshrined in the Privacy Protection Law, which mandates that public bodies must take strict precautions to prevent unauthorized exposure of personal information. This is an event with broad implications, as the Ministry of Education maintains vast and complex databases, and the Authority's decision emphasizes the duty to ensure rigorous permission management.
Legally, the decision serves as a warning to all entities managing sensitive databases regarding the need for ongoing maintenance and strict oversight of technological tools. The incident raises significant questions regarding the Ministry's accountability toward the students and families whose details were leaked. The news highlights that the PPA, as the regulator, closely monitors the conduct of public bodies and does not hesitate to declare a violation of law when negligence or failure in information system management is evident. For the legal community and the public, this is a reminder that privacy protection is not merely a technical recommendation but a defined legal obligation.