en:information_worth_protection
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
en:information_worth_protection [2015-07-03 17:47] cr |
en:information_worth_protection [2018-11-09 15:39] (current) cr [Transmission of Information Worth Protection] |
||
|---|---|---|---|
| Line 6: | Line 6: | ||
| * Unpublished research. | * Unpublished research. | ||
| + | * Personnummer (the Swedish personal identity numbers)((Personnummer (the Swedish personal identity numbers) is not sensitive personal data according to GDPR, but **"extra skyddsvärd" (in need of extra protection)** according to Dataskyddslagen (the Swedish data protection law). The personnummer should be treated as sensitive for integrity reasons and should be handled restrictively.)) | ||
| * Student or personnel matters that are confidential. | * Student or personnel matters that are confidential. | ||
| * Ongoing contracts covered by secrecy under the public procurement act. | * Ongoing contracts covered by secrecy under the public procurement act. | ||
| Line 13: | Line 14: | ||
| Please see [[http://medarbetarwebben.lu.se/sites/medarbetarwebben.lu.se/files/riktlinjer-informationssakerhet_0.pdf|InfoSäk A]] (in Swedish) for more information. | Please see [[http://medarbetarwebben.lu.se/sites/medarbetarwebben.lu.se/files/riktlinjer-informationssakerhet_0.pdf|InfoSäk A]] (in Swedish) for more information. | ||
| + | |||
| + | |||
| + | ====== Storage of Information Worth Protection ====== | ||
| One example where it is important to keep track of what is information worth protection or not, is electronic management and saving and storing of documents. **Working drafts containing information worth protection, for example, may not be stored on any [[cloud services|cloud service]] online** because the information then ends up at a third party outside the university. This applies to //all// cloud services including [[Box]], [[Office 365]]/[[OneDrive]], [[Dropbox]], and others. | One example where it is important to keep track of what is information worth protection or not, is electronic management and saving and storing of documents. **Working drafts containing information worth protection, for example, may not be stored on any [[cloud services|cloud service]] online** because the information then ends up at a third party outside the university. This applies to //all// cloud services including [[Box]], [[Office 365]]/[[OneDrive]], [[Dropbox]], and others. | ||
| Documents containing such information may //only// be saved and stored on servers owned by the university, such as the university [[SharePoint]] or [[explorer|file servers]] at your office or your department. | Documents containing such information may //only// be saved and stored on servers owned by the university, such as the university [[SharePoint]] or [[explorer|file servers]] at your office or your department. | ||
| + | |||
| + | |||
| + | ====== Transmission of Information Worth Protection ====== | ||
| + | |||
| + | Information worth protection should, if possible, not be transmitted by e-mail. If information worth protection still has to be transmitted through e-mail, **such mail must be [[encrypted e-mail]]**. | ||
| + | |||
| + | Please see https://www.medarbetarwebben.lu.se/stod-och-verktyg/juridik-dokument-och-arendehantering/personuppgifter-och-dataskydd/overgripande-information/e-post (unfortunately only available in Swedish at the moment). | ||
| + | |||
| + | Please also see [[personal data in e-mail]]. | ||
| + | |||
| + | |||
en/information_worth_protection.1435938470.txt.gz · Last modified: 2015-07-03 17:47 by cr
Page Tools
