How to establish a DPA/PUBA with NAISS SENS

Background: If you, as a PI, are doing research with sensitive personal data, then you are responsible for it. Any time you expose data outside the controlling organisation (usually your home university), there needs to be an agreement regulating responsibility. This agreement is called a Data Processing Agreement (DPA), Personal Data Assistant Agreement, or Personuppgiftsbiträdesavtal (PUBA).

If your research data is controlled by one of the following organisations, there is a general DPA in place and you do not need to set up a new one. Because it details important rights and responsibilities please download a copy of the DPA here Word, 47 kB..

Organisations with a general DPA

• Karolinska Institutet
• Uppsala universitet (underbiträdesavtal)
• Göteborgs universitet
• Lunds universitet
• Chalmers tekniska högskola
• Umeå universitet
• Kungliga Tekniska högskolan
• Linköpings universitet (underbiträdesavtal)
• Stockholms universitet
• Sahlgrenska Universitetssjukhuset
• Örebro universitet
• Luleå universitet
• Sveriges lantbruksuniversitet

If you need to establish a DPA

Contact Anna Süpke at Linköping University.