Guideline 1 – Reporting the loss of equipment












            ******************************************************************************************

            *
            ******************************************************************************************
            UKRUK/62344/2018

            31 May 2018

            Any loss or theft of equipment or storage media that could allow access to personal or sen

            which Charles University is responsible must be reported.

            A loss must be reported by the employee who discovers it or the employee’s superior at the

            gdpr@cuni.cz.


            The officer makes an analysis of the risks arising from the loss and decides how to procee

            This guideline applies to all equipment used to obtain data, e.g. by cracking encryptions 

            removing a disk and obtaining the data itself or passwords for access to the university’s 
            usually involves laptops, tablets, office PCs, or mobile phones with access data.


            Storage media are typically external disks, unencrypted flash cards, backup disks, etc. th
            personal data or access passwords.


            Please remember that personal data also includes the seminar work of students, an overview
            attendance, or awards received.


            Justification:
            Charles University is required to document and assess all security issues – circumstances 
            or could cause damage, loss, or unauthorized access to personal data. It is required to in

            for Personal Data Protection, and in certain cases, the data subjects affected by the loss