3.9 Summary

Overall, for those working at the university, it can be said that the legal basis for processing, the purpose of the processing or the registration of it is often not something that the individual employee needs to consider. The purpose of processing, the registration and the legal basis applies to the entire treatment and is valid for each individual working within an established system or service. For example, Ladok is a processing tool designed to record students’ study results. There will be one record in the register and work is carried out as exercise of public authority or legal obligation (both applies) as the basis. This applies to all who submit results without the individual employee reporting this on a continuous basis. It is important to be aware of the background to the work, but for those who work with personal data in an established process, it is important to keep informed about the rules and instructions that apply. In cases of uncertainty, one should contact the person responsible for the process. However, for those who intend to establish the processing of personal data (e.g. within the framework of their research), it is necessary to meet the formal requirements for the processing to be approved. The University Data Protection Officer can be contacted for advice and support on dataskyddsombud@lnu.se.