Springboard+ began in 2011 as part of the Government’s Jobs Initiative. Its aim is to provide free and heavily subsidised upskilling and reskilling opportunities through higher education in areas where there is an identified skills need. A particular emphasis of the initiative is upskilling people who are unemployed or in receipt of a social welfare payment.
Springboard+ complements the core State-funded education and training system and is one of a number of initiatives designed to support people back into employment, improve the skills of those in employment, and to build the supply of skilled graduates to meet current and future skill needs of the Irish economy.
This is to advise of an issue that was detected on the Springboard system on 2nd September. It arose on the Employer’s Interface, which allows employers to connect with Springboard+ graduates of courses that are aligned with the skills need of the employer. This register is entirely voluntary, and applicants are asked upon registration whether they wish their details to be included.
We have included some FAQs in relation to the issue below, and we are liaising with the Data Protection Commissioner.
For further information please contact dataprotection@hea.ie.
The issue arose on the Springboard+ Employer’s Interface, a register which some applicants consented to be included on when they registered for Springboard+.
It came to the attention of the HEA that employers were not being adequately verified when registering for the interface. This oversight resulted in details of applicants being visible to a small number of individuals without a valid connection to the intended use of the interface.
The data in question contained the following fields:
No eligibility or special category data under Article 9 GDPR was exposed at any stage.
While we appreciate this is highly concerning, as we have disabled access to this portal we do not foresee any further risks to your privacy as a result of this issue. We undertook a manual check of all registered employers on the system, and there is no evidence that this data was being misused in any way, and there was no further illegitimate attempts to access the system.
We immediately disabled the portal upon being made aware of the issue on Friday 2nd September.
We reported this as a data breach to the DPC also on Friday, and will follow their recommendations.
We are conducting a Data Protection Impact Assessment in relation to the Springboard+ System. We will share a summary of the outcomes of the DPIA when finalised via the Springboard+ website.
You do not need to take any further action at this time as the portal has been disabled.
Springboard+ is managed by The Higher Education Authority on behalf of The Department of Further and Higher Education, Research, Innovation and Science.