Personal Data and Confidentiality
- all handling of personal data must to be reported to the university’s data protection officer.
- informed consent is usually a requirement when you collect personal data. Read more about personal data and data protection on the Lund University Staff Pages.
- sensitive information such as interviews (audio files and transcriptions), survey responses, and consent documents, should be stored in a secure location. For example, use a strongbox or on secure server space.
- It must be decided how codes, de-identification of data, and encryption keys are to be managed.
The new General Data Protection Regulation (GDPR) that takes effect 25th May 2018, sets stricter requirements on how personal data may be managed at the university. The team that has worked to prepare the university for this transition, has compiled an FAQ that addresses many practical implications once the regulation takes effect.
Data Protection Officer (DPO)
dataskyddsombud [at] lu [dot] se