EAGLE SCOUT | ISSUE NO. 25-19
23 Oct 2025 | University Data Protection Office

NEWS | WSU students targeted by fake degree revocation emails
7 Oct 2025
AUSTRALIA - Western Sydney University (WSU) students received fake emails claiming their degrees had been revoked after a major data breach. One email demanded original documents, while another highlighted security flaws at the university. WSU confirmed the emails were fraudulent and alerted the police. READ MORE
NEWS | TikTok exposes teens to sexual content
2 Oct 2025
UK - An recent investigation has found that new accounts on TikTok, set up as 13-year-olds with “Restricted Mode” on, were almost instantly given recommendations pertaining to sexualised and pornographic searches. The UK’s Online Safety Act 2023 requires platforms to protect minors from pornography, but these findings suggest TikTok’s algorithm may be violating the Law. READ MORE
NEWS | Microsoft faces privacy case over student data
14 Oct 2025
AUSTRIA – As per Austria’s data protection authority, Microsoft broke privacy rules by illegally tracking students through its Microsoft 365 Education platform. It also failed to give users full details on how their data is being used and shared. Students who asked to see their data were referred back to their schools, which could only give limited answers. READ MORE
NEWS | NEET PG 2025 candidates’ data sold online
17 Oct 2025
INDIA - Personal data of National Eligibility cum Entrance Test for Postgraduate (NEET PG) 2025 candidates is currently being sold online. Students claim receiving calls from brokers offering medical seats, raising privacy concerns. Officials of the National Board of Examinations believe a leak may have happened after its data was passed on to other agencies. READ MORE
NEWS | NPC halts “World ID” biometric project
10 Oct 2025
PHILIPPINES - The National Privacy Commission (NPC) ordered Tools for Humanity (TFH), creator of World ID, to stop collecting iris scans in the Philippines, citing privacy violations. The company argued it followed local laws and would appeal the order. The NPC said TFH’s data collection was excessive and used “invalid consent” by offering crypto rewards for sign-ups. READ MORE