Overview of LSHTM's approach to complying with EPSRC data management requirements, focussed on security requirements. Presented at Glasgow University on May 8th 2014
How to Troubleshoot Apps for the Modern Connected Worker
Complying with EPSRC policy: An LSHTM case study
1. Complying with EPSRC Policy:
An LSHTM Case Study
Gareth Knight
Project Manager
LSHTM Research Data Management Service
This work is licensed under a
Creative Commons Attribution 2.0
UK: England & Wales License
8th May 2014
DCC Workshop:
Institutional compliance with EPSRC Policy Framework
3. Nature of Research Projects
Involve
Collaboration
• Each institution
contributes staff
time, data, or
other resources
• Difficult to split
data into
institutional
components ‐
require multiple
permissions to
share
Take place in
different locations
• Each country
has different
legal
requirements
& checks
• Require
government
permission –
gov. as a rights
holder
Involve research
participants
• Participant
consent must
be obtained
• Security
measures
must be apply
to meet Data
Protection Act
1998
Take place over
many years
• Collaboration
extends
beyond
funding period
• Require
consortium
agreement for
project &
post‐project
use
Research projects often....
5. To Share or not to Share:
An existing resource
1. Is the Sharing justified?
• What benefits will it provide?
• What are the risks associated with sharing data?
2. Do you have the ability to share?
• Intellectual Property Rights (IPR)
• Participant Consent
• Other obligations, e.g. confidentiality
3. Are there any conditions associated with
sharing?
• What measures need to be in place to protect
data? (e.g. record access requests, specific use
only)
The ICO publish several guides on data sharing & security useful for researchers.
http://www.ico.org.uk/for_organisations/data_protection/topic_guides/data_sharing
http://www.ico.org.uk/for_organisations/data_protection/topic_guides/anonymisation
7. Final thoughts
• EPSRC principles inform good practice & provide baseline for
evaluation
• Responsible data sharing needed – balance security and
sharing obligations
• Researchers know their research topic – need practical help
with the technical and legal side
• A lot of information already available (ICO, UKDS, Clinical
Trials) – need to present it in easy‐to‐read form
• Effectiveness of communication ‐ PIs prefer one‐to‐one advice,
project staff enrol on training courses.