How to handle personal data as a Sitecore editor

DTU’s websites in Sitecore use cookies for statistics and information dissemination. DTU has signed data processing agreements for these cookies, so they comply with the GDPR.
When you add content, features or services as an editor, you must make sure they comply with the GDPR. This means you must not:

upload files that contain personal data to the Media Library.
use images of people that have not been approved for web use. E.g. use DTU’s image bank Skyfish or a commercial image service.
add code that discloses user data on to third parties without a data processing agreement.

In Sitecore, you can display personal data through templates that pull data from sources such as DTUbasen and DTU Orbit. This data processing is covered centrally by DTU’s administration and does not need to be handled locally.