General processing agreements

When researchers from universities other than Uppsala University use the services of NBIS involving personal data, NBIS/Uppsala University will act as Processor for the Controller (which is the university where the researcher is employed). In such cases, an agreement must be established between the Controller and the Processor according to Article 28 (3) of the GDPR.

General agreements have been established between NBIS/Uppsala University and some Swedish universities, for three different general cases:

  1. NBIS/Uppsala University acts as Processor on behalf of another university for performing bioinformatics analysis
  2. Another university acts as Sub-processor to NBIS/Uppsala University for performing bioinformatics analysis. This is for cases where NBIS staff is employed by a university other than Uppsala University.
  3. NBIS/Uppsala University acts as Processor on behalf of another university for long-term storage of personal data in the Swedish EGA node.

Established agreements

This table lists the registration numbers ("diarienummer") at Uppsala University for the established agreements, including links to the agreements, for the three different cases listed above.

UniversityCase 1Case 2Case 3
Göteborgs universitetICM 2019/181ICM 2019/182ICM 2019/183
Karolinska institutetICM 2019/184ICM 2019/185ICM 2019/186
Kungliga tekniska högskolanICM 2019/187ICM 2019/188ICM 2019/189
Linköpings UniversitetICM 2019/190ICM 2019/191ICM 2019/192
Lunds UniversitetICM 2019/193ICM 2019/194ICM 2019/195
Naturhistoriska riksmuseetICM 2019/196ICM 2019/197
Stockholms universitetICM 2019/202ICM 2019/203ICM 2019/204
Sveriges lantbruksuniversitetICM 2019/199ICM 2019/200ICM 2019/201
Umeå universitetICM 2019/205ICM 2019/206ICM 2019/207


Outstanding agreements

NBIS is waiting for agreements to be signed by the following universities