Data that contains personal information has to be handled according to certain regulations, note that:
- all handling of personal information must to be reported to the university’s personal data protection officer. Read about personal data and data protection on the Staff Pages.
- informed consent is usually a requirement when you collect personal data. Read more about written consent on the Lund University Staff Pages.
- sensitive information must be stored in a secure location. For example, this may apply to sensitive personal data, included in interviews (audio files and transcriptions) or survey responses, and attached consent documents. The data may need to be stored in a strongbox or on a secure server.
- It must be decided how codes, de-identification of data, and encryption keys are to be managed.