What information should be provided when processing personal data?

7 November 2018

There is now a checklist available explaining the information that should be provided to individuals whose personal data is being processed by the University. The checklist has been developed in accordance with the requirements in the General Data Protection Regulation. The checklist explains and exemplifies how the information could be presented. Templates on how to present the information within a research project and in education, administration and outreach events are also available.

 

Photo: Mostphotos

When the General Data Protection Regulation came into effect in May 2018, this strengthened the individual's rights to gain information about the processing of their personal data. To Umeå University, this contributed to increased requirements as to what information the University must provide to the individuals whose personal data has been processed for various reasons.

The General Data Protection Regulation contains detailed provisions for what information should be provided and when. The requirements for information differ depending on if it has been:

1) collected from a registered individual; or

2) collected from another source than the registered individual.

To simplify for you as a member of faculty and staff, the University's data protection officer, in consultation with the legal officers, has laid out a checklist of the information that should be provided, as well as templates indicating how that information could be presented.

The checklist covers and explains for instance the requirements for information in the General Data Protection Regulation. It also includes a quick reference guide listing the requirements for information relevant when personal data has been collected from the registered individual, or from other parties respectively.

Two templates have been put together to cover personal data processing within research projects as well as education, administration and outreach.

The templates list all the information required according to the General Data Protection Regulation, and all members of faculty and staff are recommended to use these when providing information to registered individuals.

The checklist and templates may be updated, so please always download and use the latest available version on Aurora before providing information.

Please also note that your personal data processing must be registered at Umeå University. To do so, please contact pulo@umu.se for assistance in registering your data processing.

For now, the information is, however, only available in Swedish.

Checklist

Templates

More information about personal data

For more information, please:

Contact the data protection officer

Login to be able to read and write comments.