Terms of use for Microsoft 365 (M365)
Terms of use for cloud services provided by Microsoft
These terms of use apply to all services provided via the Microsoft cloud platform (M365) to employees and other active personnel at Uppsala University. The following services are currently delivered via the platform:
Support for these services is handled via itsupport@uu.se.
USER RESPONSIBILITY
All users of Microsoft cloud services are personally responsible for ensuring that the information processed, stored, and made available in the services does not contain information that may be perceived as offensive, insulting, constitute a criminal offence under the Swedish Penal Code and/or violate copyright, and that all material complies with applicable regulations regarding secure information management in accordance with Uppsala University’s data protection policy and the services’ CIA value (222).
The Staff Gateway has more information about the university’s information security efforts.
INFORMATION RESPONSIBILITY
Users of Microsoft cloud services are expected to monitor their information and act promptly when there is a need to remove prohibited information, both in their own and others’ posts. Users who add material that violates Swedish law may, in the event of a legal dispute, be held personally responsible.
All users may need to register content that relates to a case or other matter that falls within the authority’s responsibility and that constitutes an official document in a storage space, collaboration group, or another forum within any of Microsoft’s cloud services. The owner may contact registrator@uu.se if assistance is needed.
Also bear in mind that permission from the copyright holder is required if you wish to use/add material covered by copyright (images, articles, etc.).
DOCUMENT MANAGEMENT
Microsoft cloud services are primarily intended to be used for collaboration, processing, and revision of shared material. The platform is not an archive or a place for long-term storage of data and/or internal or external publication. Finalised or outdated material must be registered, moved to another storage location, or deleted.
SECURITY
Microsoft cloud services have been information-security classified as meeting the requirements for Confidentiality, Integrity, and Availability at the level CIA: 222. As a result, the services are considered to provide sufficient security for the processing of personal data that is not regarded as sensitive.
The services are not classified for storing or handling information requiring special protection, such as sensitive personal data, information subject to special confidentiality requirements, confidential personnel matters, or research data requiring special protection.
For content that requires strong protection, for example the storage or other handling of sensitive information, a specific assessment by the responsible business representative is always recommended. Read more about Uppsala University’s information security efforts in the rules collection: