Information management for researchers

Information classification

It is important to classify the information handled in research to ensure that it is handled appropriately and, where necessary, using the right security measures. It is particularly important to identify whether sensitive information containing any of the following is being processed:

  • Confidentiality
  • Sensitive personal data
  • Personal data meriting extra protection
  • Information critical for university/departmental functions

The following link provides more information on the above concepts and the storage rules that apply in the university: https://www.hb.se/en/staff/for-my-work/it-services/file-management/storage-rules/

Keep in mind that security throughout the chain from data collection to publication and archiving needs to be ensured when handling sensitive information, not least when it comes to transferring data to/from other parties. A general point to consider is that if file encryption is used in any way in the chain, it is important to ensure that unencrypted files are stored in a secure location where only authorised people have access. This is to avoid problems if the password is forgotten for the encrypted files. As for archiving at the end of the project, the files must be unencrypted.

Below are answers to some frequently asked questions. Questions should be sent to dataskydd@hb.se

Share files with internal parties in the university

Sharing files with external parties outside the university

Sending files containing sensitive information by email

Recording of interviews containing sensitive information

Surveys

Transcription of interviews