Processing of personal data

In short: it is not permitted to create and publish lists of students with, for example, social security numbers or other personal information.

The Swedish Authority for Privacy Protection has useful information about Privacy/Personal Data.

The General Data Protection Regulation (GDPR).

Here you will find information and support about the Data Protection Ordinance and personal data processing.

Preserving and archiving

As an employee of the University of Borås, you handle information in many different contexts such as e-mail, mail, information in different systems, documents, and information on social media. Archiving and culling of information at a government agency such as the University of Borås is strictly regulated by law.


When it comes to archiving, everything remains as it is in Canvas for the time being, but archiving of courses will also be secured in the long term.

Culling/Thinning of information

A certain thinning will be needed in the future, but it will follow the existing guidelines at the University of Borås..

As an employee, you have an obligation to know and comply with the rules for the archiving and culling of information.


The Agreement for Higher Education Institutions entered into force January 1, 2014. The agreement enables entirely new possibilities to copy and share copyright protected material for teaching, among other things, significantly enhanced facilities to copy and share digitally.

The agreement allows teachers and students to copy and share copyright protected material from Swedish and non-Swedish pictures, text and musical notation that have been made public, from, for example books, teaching materials, the press, digital publications, websites etc.

You'll find the Copying Rules at Bonus Copyright Access website. 

Electronic message boards

The person (teacher or student) who publishes material in Canvas is solely responsible for the contents and he/she should ensure that it is of good quality, i.e. that it does not in any way insult, humiliate or abuse other users. Examples of material: published messages on message boards, documents, pictures, file sharing, contributions in chat rooms.

Furthermore, such material is considered public documents and may be handed out if anyone requests this (unless the documents by any reason are classified as secret documents). The course coordinator is, according to “Lagen om ansvar för elektroniska anslagstavlor” (The law on liability for electronic message boards), responsible to monitor the event/course at least once a week and, if needed, to remove material which violates the Copyright Act and/or if the material means instigation of rebellion, agitation against an ethnic group, child pornography or unlawful violence depiction. The Canvas system administrators also have the right to remove material which violates the University’s regulations for the use of the University’s Computer Network.

To protect the individual’s privacy

To publish information in Canvas that is personal information, such as exam results related to a person, requires the consent of each student. You are not permitted to publish exam lists in Canvas with the students’ entire social security number or with such large parts of it so that a person can be identified by someone else.