NCRC posts “Notification of Suspected Personal Data Loss.”
NCRC Posts “Notification of suspected Personal Data Loss.”
Thank you to a Paperslip Source for the link.
(ENGLISH) Graphic text lifted using Google Translate.
+
“The National Center for the Rights of the Child (hereafter, NCRC) presents its sincerest apologies for a suspected data loss incident. The NCRC has become aware that some of the external hard drives that were the result of the 2013 to 2022 Adoption Record Digitization Projects have potentially been lost.
We deeply regret this development despite the NCRC's committment to protecting personal data (adoption information).
The following notice outlines the items of data that were potentially lost, the time and circumstances of the loss, mitigation initiatives and reporting procedures for damages and redress.
To facilitate our adoption information disclosure service, the NCRC has been implementing the digitization of the adoption records held in various adoption agencies.
Therefore, the storage media resulting from the '2013 to 2022 Adoption Record Digitization Projects' were used in our day-to-day operations which included being edited and supplemented.
Due to these subsequent edits, we are no longer able to determine whether our inventory represents altered originals or whether the original storage solutions were lost. As a result, we have reported this situation to the Personal Information Protection Commission and are awaiting their investigation.
The scope of data digitized for each individual varies. The full extent of possible data lost is listed below.
Adoptee: Pre-adoption name, Post-adoption Name, Photos, Gender, Resident Registration Number, Date of Birth, Address, Time of Birth, Date of Adoption, Blood Type, Adoption Agency, Nationality, Ethnicity, Phone Number, Family register/place of origin, Email address, Address, Foster parent's name, Place of birth, Date of discovery, Person who discovered the child, Condition at discovery, Place of discovery, Police station where the child was taken into custody, Pre-adoption care facility, Length of stay at the facility, Physical characteristics, Medical history and health status, Disability rating, Resident registration record and family relations certificates (name, resident registration number), Child and agency identification numbers, Mixed-race status, Family type, Reason for adoption, Date of acquisition of nationality, Date of loss of nationality, Immigration records.
Biological Parents: Name, Photos, Date of Birth, Reason for Adoption, Place of Origin, Resident Registration Number, Resident Registration Certificate/Family Relations Certificate (Name, Resident Registration Number), Medical History (Disabilities, Medication), Educational Level, Economic Status, Physical Appearance, Physical Information, Nationality, Race, Address, Contact Information, Email Address, Seal Registration Certificate, Marital Status.
Adoptive Parents: Name, Photo, Resident Registration Number, Date of Birth, Contact Information, Email Address, Nationality, Race, Religion, Occupation, Education Level, Address, Annual Income, Type of Housing, Health Status (Medication Use), Household Debt Information, Family Survey (Member Information), Environment, Blood Type, Marital Status, Criminal Record Check
Relatives/Representatives: Name, Photo, Gender, Resident Registration Number, Date of Birth, Contact Information, Email Address, Nationality, Address, Seal Registration Certificate, Family Relationships
Foster Families: Name, Photo, Resident Registration Number, Date of Birth, Contact Information, Email Address, Nationality, Address, Seal Registration Certificate, Family Relationships
Other: Gender of the applicant for comprehensive adoption counseling, Contact information, Email address, Legal status, Post-adoption follow-up counseling, Photos, Intake worker, Adoption Agency information (agency director and staff), Guarantor's personal information, Communication information between relevant agencies, Pre- and post-adoption counseling records, Passport information
The items collected above may vary depending on the year in which it was digitized.
Once it is known whether there was indeed data loss and to what extent through the Personal Information Protection Commission's investigation, the NCRC will notify each affected party pursuant to the relevant laws.
In response to this incident, the NCRC has put together a response team and is operating a civil complaints reception point. We are also strengthening the management of our data storage solutions as well as taking steps toward damage relief.
To minimize potential harm, please be cautious of suspicious messages, mail, or uther communications with unclear intent. If a data breach (loss) is confirmed in the future, you may apply for dispute mediation through the Personal Information Dispute Mediation Committee(www.kopico.go.kr, 1833-6972). Furthermore, if you have any other questions, please contact the NCRC department in which this incident has taken place via the contact information below. Alternatively, you may contact the Korea Internet & Security Agency( 118).
Data Breach Inquiries: Weekdays 9:00 AM–6:00 PM
Data Breach dept. contact:
(Domestic) 02-6454-8637, 02-6454-8636
(International) 02-6454-8644
Data Breach dept. email: familysearch@ncrc.or.kr
We sincerely apologize once again for this incident and for the distress this may cuase to adoptees and families. Moving forward, we are committed to implementing stronger safeguards, and taking all possible measures to prevent such occurrences. We promise to continue working diligently to restore your confidence and regain the trust of all thos affected.”
