• Opening hours
• Research data shared with students, which they may store on their private PCs
• Study descriptions
• News articles
• AAU's website
• Open data
• Published research reports
• Names of AAU employees
• Job titles
• Work telephone numbers
• AAU email addresses
• Times of absence
• Teaching materials (unless they contain information with a higher classification) 

Accessible to everyone inside and outside the university.

Electronic: 

• May be stored on AAU devices and own private devices.

Physical:

• No special requirements for physical storage.

Electronic:

• Can be freely shared internally and externally.

Physical:

• Can be freely shared internally and externally.

It is good practice to delete/dispose of information when it is no longer needed for work purposes.

Journaling requirements may apply.  

• Special collections at AUB
• Department budgets
• Procurement agreements
• Salary information
• Unpublished scientific articles
• AAU user names
• Pension information
• Birthdays
• Nationality
• Personality tests
• Grades
• Images of identification documents
• Family relationships
• Private address
• Private telephone number
• Private email address
• Information subject to confidentiality agreements 

Only persons with a documented work-related need, including external persons with a documented working relationship.

Electronic: 

• May only be stored on AAU-managed devices and/or in approved systems. See list of approved systems.  

Physical:

• Must only be stored in such a way that unauthorised persons do not have access to view or access the contents, e.g. in a locked office, locked cabinet, locked box or similar. 

Electronic:

• Sharing may only take place via approved systems. See the list of approved systems.
• Information may only be sent/disclosed to partners when there is a legal basis for the transfer (data processing agreement, disclosure, etc.). 

Physical:

• Must be sent internally in a sealed envelope marked ‘attention person’ or delivered in person, but must not be carried on public transport such as buses and trains.
• Documents containing level 2 data must be sent by registered post or using a reliable courier service.  

Be aware of any specific deletion requirements for your data.

It is good practice to delete/dispose of information when it is no longer needed for work purposes.

Journaling requirements may apply.  

• Large amounts of sensitive personal data, e.g.:
  • Health information
  • Trade union membership
  • Religious beliefs
  • Sexuality
  • Race and ethnic origin
  • Political beliefs
  • Philosophical beliefs
• STÅ information
• Biometric data
• Whistleblower cases 
• Maps/lists with detailed information about AAU locations of gas, water and sprinkler shut-off valves, as well as hazardous chemicals
• Alcohol and drug testing
• Registered exam cheating
• CPR number
• Disciplinary cases
• Administrative use of secret name, address and/or telephone number

Only persons with a documented work-related need, including external persons with a documented working relationship.

Electronic: 

• May only be stored on AAU devices and in approved systems. See list of approved systems.  

Physical:

• Must be stored so that unauthorised persons cannot see or access the contents, e.g. in locked security cabinets and boxes or similar at AAU locations.  

Electronic:

• All electronic transfers of information must be encrypted using approved encryption methods.
• Information may only be sent/disclosed to partners when there is a legal basis for the transfer (data processing agreement, disclosure, etc.). 
• Information may only be sent via AAU-approved solutions. See the list of approved systems.  

Physical:

• Physical media containing Level 3 data (e.g., USB drives, hard drives) must be transported in sealed packaging and under constant supervision. 
• Documents containing Level 3 data must be sent by registered post or using a reliable courier service.  

Information must be deleted/disposed of when there is no longer a legal basis for data processing.  

However, pay particular attention to whether there is legislation that requires AAU to store information after data processing has been completed. 

• Defence and military data
• Data and information related to security-relevant research that could be used directly and without modification to cause significant harm to people, the environment and/or peaceful coexistence. 

Access is restricted to specially trusted employees with management-approved, documented needs.

Data must be handled in secure systems with exceptional technical and organisational measures. 

• Information in this classification may only be stored after consultation with IT Security. 

Information in this classification may only be shared after consultation with IT Security. 

Information in this classification may only be deleted after consultation with IT Security.