All research projects that involve personal data processing are to be registered in Personal Data Lund University (PULU). This also applies if you have registered your research project previously. Student projects involving personal data processing are also to be registered.
Above all, it is a matter of public confidence and the University’s credibility. People who participate in research projects must be able to trust that the University processes their personal data in accordance with existing laws and regulations.
There is also a legal requirement that the University can present a register covering all personal data processing. There has long been a requirement for a register, but with the introduction of the GDPR, the register requirement has been tightened throughout Europe. If the University does not fulfil the requirements, we may incur financial penalties.
Read more here.