Do Diia employees have access to personal data of Ukrainians?
A scandal erupted on Twitter: users began discussing data security issues in the state service Diia. The reason was the story that one of the employees of the Action Center used her official position and access to personal data to threaten people.
According to AIN.UA , it all started with a chat on Telegram. One of its participants began using her work access to the personal data of Diia users to threaten other chat participants. In particular, she threatened to mobilize and transfer personal data to the TCC.
Like, there is really time to explain everything to everyone before the screenshots go viral, I understand that you have a grudge against people, but what you did is a criminal case with some people, we have already discussed your actions with certain structures
Waiting in DM, no you won’t have much fun https://t.co/TXaQWR9bhN pic.twitter.com/uXGWePKgMG
– Mr. Poltava🐱 (@poltava_x) August 3, 2023
The real story is different from the Twitter version.
The woman involved in the scandal had the “victim’s” private data because they knew each other personally. And a phone number, which is the only private information mentioned in the screenshots.
In the Ministry of Digital Transformation, the support operator does not have access to personal data, registers or other information.
Comment of the Ministry of Digital Transformation:
The action does not store personal data, but uses the data-in-transit model, pulling user data from the relevant registry. Employees of Diia cannot have access to personal data because such data is not accumulated. Accordingly, Diia is not involved in the transfer of personal data published on social networks.
The information spread on social media is fake.
The preliminary investigation revealed that the participants in the situation, one of whom was a Diia support operator, had known each other personally long before the conflict. The phone numbers used to contact the operator are private. She had them before, obtained through personal communication and social media.
The Diya employee is currently suspended from work until all the details are clarified. In this situation, there were personal motives and relationships of the parties to the conflict that were not related to the job duties of the support operator.
Our support team logs every action of operators, project managers, and developers, as well as the history of processing at each level of support.
Operators have access only to view the dialog with the user. Neither support managers nor developers – none of Diia’s employees have access to personal data of Ukrainians, the Ministry of Digital Transformation comments.
