Nepal’s Data Security Concerns: Institutions and Individuals Alike Show Little Sensitivity

A recent incident involving the unauthorized sharing of student data by Padmakanya College in Kathmandu has raised concerns about data security in Nepal’s educational institutions. The college had posted the admission cards of over 1,300 students on social media, making their personal details, including symbol numbers and registration numbers, publicly accessible.

When questioned about the incident, the college administration claimed that they had done so with the intention of making it easier for students to access their admission cards. However, this explanation has been met with skepticism, with many pointing out that the college’s actions demonstrate a lack of understanding of data security and sensitivity.

This incident is not an isolated one. Nepal’s government websites have also been vulnerable to cyber attacks, with several instances of data breaches and unauthorized access reported in the past. In one notable case, a software developer had cloned the official website of the government’s ‘Nagarik App’ and hosted it on his personal domain, potentially putting the sensitive information of users at risk.

Furthermore, many private businesses, including supermarkets and cafes, have been collecting personal data from customers without their knowledge or consent. This data is often collected under the guise of providing services or discounts, but the security and protection of this data are not guaranteed.

Cyber security experts warn that such practices can have serious consequences, including the misuse of personal data and the compromise of individual privacy. The lack of transparency and accountability in the collection and use of personal data is a major concern, and there is a need for greater awareness and regulation in this area.

In Nepal, the issue of data security is not limited to online platforms. Many physical businesses, including supermarkets and cafes, are also collecting personal data from customers without their knowledge or consent. This data is often collected under the guise of providing services or discounts, but the security and protection of this data are not guaranteed.

The lack of transparency and accountability in the collection and use of personal data is a major concern, and there is a need for greater awareness and regulation in this area. Cyber security experts warn that such practices can have serious consequences, including the misuse of personal data and the compromise of individual privacy.