Skip to main content
SDUnet

Search

Dansk
Menu

Data protection and information security

Data processing agreements

Do you collaborate with others in your project or do you use special systems for personal data? SDU must take a position on the legal framework for the collaboration. See what options you have.

If there are several parties in the project, SDU must take a position on how the collaboration between the different parties is legally connected. This may be projects where you work together with others (e.g. Odense University Hospital, another domestic or foreign university or an external company), or if you want to use a special system/programme for processing personal data.

There are several legal options. In all three cases, legal agreements must be made to ensure that the division of responsibilities is clearly described.

  • SDU is the "data controller" and the other parties are "data processors" if it is SDU that decides how the project should proceed and the other participants follow SDU's instructions.
  • SDU is a "data processor" in a project if it is another institution that decides how the project should proceed and SDU simply follows the instructions from the other institution.
  • SDU is a "joint data controller" if you are several institutions that together decide how the project will be run.

Are you in doubt?

Contact SDU RIO if you are in doubt:

  • SDU has a data processing agreement with the provider of the system or programme you wish to use.
  • How the data processor structure works.
  • How to draw up a data processing agreement.
Contact SDU RIO (form)

Please note

You, your department or your faculty must never sign data processing agreements yourself.

Do you have any questions?

The GDPR and Information Security Coordinators are your local contact and advisor for day-to-day data protection and information security at SDU.

See also