User Tools

Site Tools


en:information_worth_protection

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
en:information_worth_protection [2015-07-03 17:44]
cr [Information Worth Protecting]
en:information_worth_protection [2018-11-09 15:39] (current)
cr [Transmission of Information Worth Protection]
Line 6: Line 6:
  
   * Unpublished research.   * Unpublished research.
 +  * Personnummer (the Swedish personal identity numbers)((Personnummer (the Swedish personal identity numbers) is not sensitive personal data according to GDPR, but **"​extra skyddsvärd"​ (in need of extra protection)** according to Dataskyddslagen (the Swedish data protection law). The personnummer should be treated as sensitive for integrity reasons and should be handled restrictively.))
   * Student or personnel matters that are confidential.   * Student or personnel matters that are confidential.
   * Ongoing contracts covered by secrecy under the public procurement act.   * Ongoing contracts covered by secrecy under the public procurement act.
Line 12: Line 13:
   * Etc.   * Etc.
  
-Please see [[http://​medarbetarwebben.lu.se/​sites/​medarbetarwebben.lu.se/​files/​riktlinjer-informationssakerhet_0.pdf|InfoSäk A]] for more information.+Please see [[http://​medarbetarwebben.lu.se/​sites/​medarbetarwebben.lu.se/​files/​riktlinjer-informationssakerhet_0.pdf|InfoSäk A]] (in Swedish) ​for more information. 
 + 
 + 
 +====== Storage of Information Worth Protection ======
  
 One example where it is important to keep track of what is information worth protection or not, is electronic management and saving and storing of documents. **Working drafts containing information worth protection, for example, may not be stored on any [[cloud services|cloud service]] online** because the information then ends up at a third party outside the university. This applies to //all// cloud services including [[Box]], [[Office 365]]/​[[OneDrive]],​ [[Dropbox]],​ and others. One example where it is important to keep track of what is information worth protection or not, is electronic management and saving and storing of documents. **Working drafts containing information worth protection, for example, may not be stored on any [[cloud services|cloud service]] online** because the information then ends up at a third party outside the university. This applies to //all// cloud services including [[Box]], [[Office 365]]/​[[OneDrive]],​ [[Dropbox]],​ and others.
 Documents containing such information may //only// be saved and stored on servers owned by the university, such as the university [[SharePoint]] or [[explorer|file servers]] at your office or your department. Documents containing such information may //only// be saved and stored on servers owned by the university, such as the university [[SharePoint]] or [[explorer|file servers]] at your office or your department.
 +
 +
 +====== Transmission of Information Worth Protection ======
 +
 +Information worth protection should, if possible, not be transmitted by e-mail. If information worth protection still has to be transmitted through e-mail, **such mail must be [[encrypted e-mail]]**.
 +
 +Please see https://​www.medarbetarwebben.lu.se/​stod-och-verktyg/​juridik-dokument-och-arendehantering/​personuppgifter-och-dataskydd/​overgripande-information/​e-post (unfortunately only available in Swedish at the moment).
 +
 +Please also see [[personal data in e-mail]].
 +
 +
  
en/information_worth_protection.1435938264.txt.gz · Last modified: 2015-07-03 17:44 by cr