How to establish a PUBA with UU

Background: If you, as a PI, are doing research with sensitive personal data, then you are responsible for it. If you are going to work with sensitive personal data on Bianca and you are not employed at Uppsala University, then there needs to be an agreement in place that regulates the partial delegation of responsibility from you to us. This agreement is called a Personal Data Assistant Agreement, or Personuppgiftsbiträdesavtal, or PUBA.

Instructions for establishing a PUBA with UU varies depending on your home university. 

If you are employed by Karolinska Institutet or Lunds Universitet:

  1. The researcher contacts the data protection officer at KI (dataskyddsombud@ki.se) or Lund (dataskyddsombud@lu.se) to verify that KI/Lund is Data Controller (Personuppgiftsansvarig) for the data and the existing template can be used.
  2. If KI/Lund is Data Controller and the template can be used:
    1. There are two agreements for each PI. The templates are different for each university, please download and unzip the template for your university here:
      1. Karolinska Institutet  
      2. Lunds Universitet 
    2. The PI who is responsible for the project must be the one that applies for the SNIC project and who is named in the agreements. A person authorised to sign agreements on behalf of their university must sign the agreement (at UU this is the department head, but this can vary from place to place).
    3. Send two signed copies of each agreement (four in total) to UPPMAX (Elisabeth Larsson, P.O. Box 337, 751 05 Uppsala). Include a return address where a completed set of copies can be sent after the UU/IT department head has signed.

If you are employed elsewhere:

  1. Contact Ann-Charlotte Sonnhammer (ann-charlotte.sonnhammer@it.uu.se) for information on how to proceed.