Skip to main content
SDUnet

Data protection and information security

Personal data in education

Below you will find information and concrete examples of how to take data protection and information security into account when communicating with students and organising training.

When you are lecturing

Communication with students

Communication should always be sent to their student.sdu.dk email or via itslearning. Please note that messages in itslearning cannot be deleted, so please ask your students to send messages containing sensitive personal data (health information, race, etc.) via their student email.

See the communication recommendations for itslearning.

If you receive an email from a student's private email, ask them to resend from their SDU email so that you can be sure which student you are communicating with.

Remember to delete sensitive and confidential personal data from your mailbox within 30 days of receipt and general personal data when you no longer need it/case is closed. If you need to store sensitive data for longer than 30 days, move it to a system approved for longer storage, such as SharePoint. Also, be aware of whether anything needs to be entered records.

Be especially aware that all specific information about what the student has is sensitive personal data, even if the student has "only" broken a leg or caught a cold.

Guidance for students on GDPR

The executive board has adopted a policy for data protection in students' independent assignments. This states:

... that the specific guidance in relation to each student's project lies with the student's project supervisor", and that "the supervisor supports the student in completing the project in accordance with the academic, legal and ethical standards of the subject area, including the data protection requirements of the subject area.

It will often be the individual student who is responsible for the data they process in connection with master's theses, bachelor theses, etc. - but this is not always the case. If the student is involved in a research project where SDU provides data or asks the students to process data in a specific way, it may be SDU and not the student who is the data controller. If in doubt, ask SDU RIO.

Read the guidelines for data protection in students' independent assignments (docx)

Material for students

You can refer students to the pages below, and you are always welcome to orientate yourself on the MySDU pages.

Material for lecturers

In collaboration with the faculties, SDU RIO has prepared a number of slides that provide an introduction to what students should be aware of when writing their master's thesis etc. You are welcome to use them in your guidance.

Do you have any questions?

The GDPR and Information Security Coordinators are your local contact and advisor for day-to-day data protection and information security at SDU.