What is the Research Data Risk Matrix?<\/h2>\n\n
The Laurier Library recommends the Digital Research Alliance of Canada's Sensitive Data Toolkit<\/em><\/a> to help researchers assess the level of risk associated with their data management practices for sensitive data, especially research with human participant data. This workbook, which is based on the Toolkit's <\/em>Human Participant Data Risk Matrix, can inform your data management planning<\/a> activities. It does not supercede recommendations and requirements issued by a Research Ethics Board or related bodies. Please consult directly with REB<\/a> for advice on your ethics applications.<\/p>\n\n
<\/p>\n"},"library":"H5P.AdvancedText 1.1","metadata":{"contentType":"Text","license":"U","title":"Untitled Text"},"subContentId":"68f4bd64-7f7e-4a3e-a970-3a4eaaebfa08"},"useSeparator":"auto"}]},"library":"H5P.Column 1.18","subContentId":"7a1844b4-ad59-4e55-91d2-f86823fb5d2f","metadata":{"contentType":"Column","license":"U","title":"What is the Research Data Risk Matrix?"}},{"params":{"content":[{"content":{"params":{"text":"

Acknowledgements<\/h2>\n\n
This document is based on the Sensitive Data Toolkit for Researchers<\/em>. The Toolkit<\/em> is a product of the Sensitive Data Expert Group of the Research Data Alliance of Canada, with original material by Chandra Kavanagh. The Toolkit<\/em> is published in three parts and can be found at:<\/p>\n\n
Sensitive Data Expert Group. (2020). Sensitive Data Toolkit for Researchers Part 1: Glossary of Terms for Sensitive Data used for Research Purposes<\/em>. Zenodo. https:\/\/doi.org\/10.5281\/zenodo.4088946<\/a><\/p>\n\n
Sensitive Data Expert Group. (2020). Sensitive Data Toolkit for Researchers Part 2: Human Participant Research Data Risk Matrix<\/em>. Zenodo. https:\/\/doi.org\/10.5281\/zenodo.4088954<\/a><\/p>\n\n
Sensitive Data Expert Group. (2020). Sensitive Data Toolkit for Researchers Part 3: Research Data Management Language for Informed Consent<\/em>. Zenodo. https:\/\/doi.org\/10.5281\/zenodo.4107178<\/a><\/p>\n"},"library":"H5P.AdvancedText 1.1","metadata":{"contentType":"Text","license":"U","title":"Untitled Text"},"subContentId":"6da5e168-1c8b-4cda-a297-8f17d48f5c78"},"useSeparator":"auto"}]},"library":"H5P.Column 1.18","subContentId":"185f65cb-1646-491a-849e-d06dd75f7ee4","metadata":{"contentType":"Column","license":"U","title":"Acknowledgements"}},{"params":{"content":[{"content":{"params":{"text":"
How to Use this Matrix<\/h2>\n\n
This guidance document will help you identify the level of risk associated with your sensitive data and inform you on actions you might consider to mitigate that risk. <\/p>\n\n
The workbook contains 8 matrices:<\/p>\n\n
\n\t
Matrix 1<\/strong> introduces and defines the workbook's data risk levels (low <\/strong>risk, medium risk, high risk, extreme risk<\/strong><\/li>\n\t
Matrix 2 <\/strong>helps you consider your data risk level based on elements of your data collection practices\n\t
\n\t\t
e.g., collection of direct identifiers vs indirect indenfiiers<\/em><\/li>\n\t<\/ul>\n\t<\/li>\n\t
Matrix 3-8<\/strong> contextualizes the level of risk and suggests mitigating strategies that can inform your data management practices\n\t
\n\t\t
e.g., \"Public cloud services should not be used unless no other options exist.<\/em><\/li>\n\t\t
e.g., \"Encrypted data and password-protected files cna be shared via email and institution-approved cloud services or collaboration sites.\"<\/em><\/li>\n\t<\/ul>\n\t<\/li>\n<\/ul>\n"},"library":"H5P.AdvancedText 1.1","metadata":{"contentType":"Text","license":"U","title":"Untitled Text"},"subContentId":"3f52b556-5966-4636-8729-f08517b8b666"},"useSeparator":"auto"}]},"library":"H5P.Column 1.18","subContentId":"bd1b014d-0660-4167-bbb3-bcbab6282903","metadata":{"contentType":"Column","license":"U","title":"How to Use this Matrix"}},{"params":{"content":[{"content":{"params":{"text":"
1. Risk Level Definitions<\/h2>\n\n
This table defines risk levels that can inform your sensitve data management practices. Factors that determine your level of data risk include:<\/p>\n\n
\n\t
identifiability of the data at the time of collection and deposit<\/li>\n\t
vulnerability of the data subjects as individuals or as part of a community or population<\/li>\n\t
sensitivity of the data in terms of its ability to cause harm - e.g., physical, psychological\/emotional, social and legal<\/li>\n<\/ol>\n\n
By identifying the level of data risk associated with your project (e.g., low risk, medium risk, high risk, extreme risk), you will be able to consider mitigating strategies in the subsequent matrices.<\/p>\n"},"library":"H5P.AdvancedText 1.1","metadata":{"contentType":"Text","license":"U","title":"Untitled Text"},"subContentId":"59ca2914-1952-4c75-b130-265c2ad61577"},"useSeparator":"auto"},{"content":{"library":"H5P.Table 1.2","params":{"text":"
\n\t\n\t\t\n\t\t\t\n\t<\/tbody>\n<\/table>\n\n
\n
<\/th>\n\t\t\t <\/th>\n\t\t<\/tr>\n\t<\/thead>\n\t
\n\t\n\t\t\n\t\t\t\n\t\t\n\t\t\t
<\/td>\n\t\t\t Low Risk<\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t\t Medium Risk<\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t\t High Risk<\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t\t Extreme Risk<\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t<\/tr>\n\t<\/thead>\n\t
Risk level definitions<\/span><\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t\t \n\t\t\t
Publicly available data where there is no reasonable expectation of privacy, regardless of sensitivity or identifiability.<\/span><\/span><\/span><\/span><\/span><\/div>\n\n\t\t\t
<\/div>\n\n\t\t\t
Data collected with no information that could reasonably identify individuals or groups.<\/span><\/span><\/span><\/span><\/span><\/div>\n\n\t\t\t
<\/div>\n\n\t\t\t
Data contains no confidential, private, or sensitive information.<\/span><\/span><\/span><\/span><\/span><\/div>\n\n\t\t\t
<\/div>\n\n\t\t\t
Data subjects are not vulnerable in the context of the research and would not be harmed if a breach were to occur.<\/span><\/span><\/span><\/span><\/span><\/div>\n\t\t\t<\/td>\n\t\t\t
\n\t\t\t
All identifiers collected have been stripped so that data to be deposited has no information that could reasonably identify individuals or groups.<\/span><\/span><\/span><\/span><\/span><\/div>\n\n\t\t\t
<\/div>\n\n\t\t\t
Data may contain information originally collected as confidential, private or sensitive. <\/span><\/span><\/span><\/span><\/span><\/div>\n\n\t\t\t
<\/div>\n\n\t\t\t
Data subjects are not vulnerable in the context of the research and would not be harmed if a breach were to occur.<\/span><\/span><\/span><\/span><\/span><\/div>\n\t\t\t<\/td>\n\t\t\t
\n\t\t\t
Identifiers remain and\/or (re)-identification is possible or probable.<\/span><\/span><\/span><\/span><\/span><\/div>\n\n\t\t\t
<\/div>\n\n\t\t\t
Data contains confidential, private or sensitive information.<\/span><\/span><\/span><\/span><\/span><\/div>\n\n\t\t\t
<\/div>\n\n\t\t\t
Data subjects may be vulnerable in the context of the research and may be harmed if a breach were to occur.<\/span><\/span><\/span><\/span><\/span><\/div>\n\t\t\t<\/td>\n\t\t\t
\n\t\t\t
Data acquired through an agreement (formal or informal) with a custodian, barring further use or retention.<\/span><\/span><\/span><\/span><\/span><\/div>\n\n\t\t\t
<\/div>\n\n\t\t\t
Identifiers remain and\/or (re)-identification is possible or probable.<\/span><\/span><\/span><\/span><\/span><\/div>\n\n\t\t\t
<\/div>\n\n\t\t\t
Data contains confidential, private or sensitive information.<\/span><\/span><\/span><\/span><\/span><\/div>\n\n\t\t\t
<\/div>\n\n\t\t\t
Data subjects are vulnerable in the context of the research and would be harmed if a breach were to occur.<\/span><\/span><\/span><\/span><\/span><\/div>\n\t\t\t<\/td>\n\t\t<\/tr>\n\t<\/tbody>\n<\/table>\n<\/div>\n\n
<\/div>\n"},"metadata":{"contentType":"Table","license":"U","title":"Table 1. Risk Level Definitions"},"subContentId":"a19e103b-ea1c-4e60-ac70-bc3e0fc19464"},"useSeparator":"auto"}]},"library":"H5P.Column 1.18","subContentId":"7be7b8e9-f95c-41f8-9017-bed10e33bc7c","metadata":{"contentType":"Column","license":"U","title":"1. Risk Level Definitions"}},{"params":{"content":[{"content":{"params":{"text":"
2. Data Collection Practices and Data Risk<\/h2>\n\n
This table helps you consider your data risk level based on elements of data collection practices. Use it with the definitions in Matrix 1<\/strong> to better understand the sensitivity of your data and the risk mitigating strategies you will have to employ.<\/p>\n"},"library":"H5P.AdvancedText 1.1","metadata":{"contentType":"Text","license":"U","title":"Untitled Text"},"subContentId":"e512b4dc-6e5c-4294-bd82-67648b9f6f84"},"useSeparator":"auto"},{"content":{"library":"H5P.Table 1.2","params":{"text":"
\n\n\t\n\t\t\n\t\t\t\n\t\t\t
<\/td>\n\t\t\t Low Risk<\/td>\n\t\t\t Medium Risk<\/td>\n\t\t\t High Risk<\/td>\n\t\t\t Extreme Risk<\/td>\n\t\t<\/tr>\n\t\t
Data Collection<\/span><\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t\t Publicly available data may be found online or in public archives, or be collected through naturalistic observation.<\/span><\/span><\/span><\/span><\/span> Researchers do not know the identities of research participants\/data subjects.<\/span><\/span><\/span><\/span><\/span> Methods should not involve direct interaction with research participants. These typically involve surveys, questionnaires and observational research.<\/span><\/span><\/span><\/span><\/span> No direct or indirect identifiers are collected.<\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t\t Researchers may know the identities of research participants\/data subjects and may have promised confidentiality through informed consent.<\/span><\/span><\/span><\/span><\/span> Methods for data collection are wide-ranging and may involve direct interaction with research participants.<\/span><\/span><\/span><\/span><\/span> Direct and\/or indirect identifiers may be collected.<\/span><\/span><\/span><\/span><\/span> The majority of human research will fall into this category. <\/span><\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t\t Researchers may know the identities of research participants\/data subjects and may have promised confidentiality through informed consent.<\/span><\/span><\/span><\/span><\/span> Methods for data collection are wide-ranging and may involve direct interaction with research participants.<\/span><\/span><\/span><\/span><\/span> Direct identifiers may or may not be collected, but indirect identifiers collected may be sufficient to render participants identifiable.<\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t\t Researchers may know the identities of research participants\/data subjects and will have promised confidentiality through informed consent.<\/span><\/span><\/span><\/span><\/span> Methods for data collection are wide-ranging and may involve direct interaction with research participants.<\/span><\/span><\/span><\/span><\/span> Direct identifiers may or may not be collected, but indirect identifiers collected may be sufficient to render participants identifiable.<\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t<\/tr>\n\t<\/tbody>\n<\/table>\n<\/div>\n"},"metadata":{"contentType":"Table","license":"U","title":"Table 2. Data Collection Risk Categories"},"subContentId":"759f7a18-f9b7-4f90-944c-aad12d6de1e3"},"useSeparator":"auto"}]},"library":"H5P.Column 1.18","subContentId":"442ed9c0-1a3d-4f35-8fb8-9aa09fa2bfce","metadata":{"contentType":"Column","license":"U","title":"2. Data Collection Practices and Data Risk"}},{"params":{"content":[{"content":{"params":{"text":"
3. Informed Consent Risk Matrix<\/h2>\n\n
Having informed youself of the level of data risk associated with your project in the previous two steps, this matrix will help you consider potential notifications required in your informed consent documents.<\/p>\n"},"library":"H5P.AdvancedText 1.1","metadata":{"contentType":"Text","license":"U","title":"Untitled Text"},"subContentId":"5008a60d-30d8-4db2-811b-1ca37e13b45a"},"useSeparator":"auto"},{"content":{"library":"H5P.Table 1.2","params":{"text":"
\n\t\n\t\t\n\t\t\t\n\t<\/tbody>\n<\/table>\n\n
\n
<\/th>\n\t\t\t <\/th>\n\t\t<\/tr>\n\t<\/thead>\n\t
\n\t\n\t\t\n\t\t\t\n\t\t\t
<\/td>\n\t\t\t Low Risk<\/td>\n\t\t\t Medium Risk<\/td>\n\t\t\t High Risk<\/td>\n\t\t\t Extreme Risk<\/td>\n\t\t<\/tr>\n\t\t
Informed Consent<\/span><\/span><\/span><\/span><\/span><\/span> <\/span><\/span><\/span><\/span> <\/span><\/span><\/span><\/span> <\/span><\/span><\/span><\/span><\/td>\n\t\t\t Notification that data will be made available for future use.<\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t\t Notification that data will be made available for future use. Option to opt-out of deposit should be considered.<\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t\t Notification that data may be made available for future use.<\/span><\/span><\/span><\/span><\/span> Request for permission to share and\/or deposit data clearly included in consent form or process. <\/span><\/span><\/span><\/span><\/span> If possible, provide options regarding areas of future research.<\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t\t Confidentiality will be maintained for as long as the data exist. Data will not be shared beyond the research team.<\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t<\/tr>\n\t<\/tbody>\n<\/table>\n<\/div>\n\n
<\/div>\n"},"metadata":{"contentType":"Table","license":"U","title":"Table 3. Informed Consent Risk Matrix"},"subContentId":"0493d972-208a-46e1-ba44-44aa7dcec4fe"},"useSeparator":"auto"}]},"library":"H5P.Column 1.18","subContentId":"11ccb06d-f667-48ce-9a91-1c6716e24d80","metadata":{"contentType":"Column","license":"U","title":"3. Informed Consent Risk Matrix"}},{"params":{"content":[{"content":{"params":{"text":"
4. Data Analysis\/Data Management Risk Matrix<\/h2>\n\n
Having informed youself of the level of data risk associated with your project in the first two tables, this matrix will help you consider data access and sharing provisions. Information on direct and indirect identifiers is also included.<\/p>\n"},"library":"H5P.AdvancedText 1.1","metadata":{"contentType":"Text","license":"U","title":"Untitled Text"},"subContentId":"a4aceccb-bb81-46aa-b07a-b2cb374e85ff"},"useSeparator":"auto"},{"content":{"library":"H5P.Table 1.2","params":{"text":"
\n\t\n\t\t\n\t\t\t\n\t<\/tbody>\n<\/table>\n\n
\n
<\/th>\n\t\t\t <\/th>\n\t\t<\/tr>\n\t<\/thead>\n\t
\n\t\n\t\t\n\t\t\t\n\t\t\t
<\/td>\n\t\t\t Low Risk<\/td>\n\t\t\t Medium Risk<\/td>\n\t\t\t High Risk<\/td>\n\t\t\t Extreme Risk<\/td>\n\t\t<\/tr>\n\t\t
Data Analysis\/ Management<\/span><\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t\t No restrictions in the analysis of data for publicly available data.<\/span><\/span><\/span><\/span><\/span> Data analysis should adhere to the REB-approved protocol and informed consent document\/script.<\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t\t Direct identifiers should be replaced as soon as possible with a linking code (e.g., pseudonym, alpha numeric code) and separated physically and\/or electronically from the master list. Consent forms should be stored separately from research data.<\/span><\/span><\/span><\/span><\/span> Only members of the research team should have access to identifiable data.<\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t\t Direct identifiers should be replaced as soon as possible, with a linking code, and separated physically and\/or electronically from the master list. Consent forms or notes with identifiers should be stored separately from research data.<\/span><\/span><\/span><\/span><\/span> Indirect identifiers should be coded, if possible.<\/span><\/span><\/span><\/span><\/span> Data should not be accessed\/analyzed in a public space where others could see data on a device or by other means.<\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t\t Direct identifiers shall be replaced as soon as possible, with a linking code, and separated physically and\/or electronically from the master list. Consent forms or notes with identifiers shall be stored separately from research data.<\/span><\/span><\/span><\/span><\/span> Indirect identifiers shall be coded, if possible.<\/span><\/span><\/span><\/span><\/span> Data shall only be accessed by members of the research team, as described in the approved protocol, and access\/analysis shall only occur in a secure environment.<\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t<\/tr>\n\t<\/tbody>\n<\/table>\n<\/div>\n\n
<\/div>\n"},"metadata":{"contentType":"Table","license":"U","title":"Table 4.Data Analysis\/Data Management Risk Matrix"},"subContentId":"97bc40db-0cf3-4d38-ad44-65a91cfc6fd0"},"useSeparator":"auto"}]},"library":"H5P.Column 1.18","subContentId":"3f694ea1-6e4d-4c1d-95a9-41a1a37f69b5","metadata":{"contentType":"Column","license":"U","title":"4. Data Analysis\/Management Risk Matrix"}},{"params":{"content":[{"content":{"params":{"text":"
5. Data Storage (Active Storage) and Security Risk Matrix<\/h2>\n\n
Having informed youself of the level of data risk associated with your project in the first two tables, this matrix will help you understand your data storage considerations, including cloud services, physical media (hard drives), and backups.<\/p>\n"},"library":"H5P.AdvancedText 1.1","metadata":{"contentType":"Text","license":"U","title":"Untitled Text"},"subContentId":"3bbdc988-4fd5-4a1b-a789-809ddcb3fe8a"},"useSeparator":"auto"},{"content":{"library":"H5P.Table 1.2","params":{"text":"
\n\t\n\t\t\n\t\t\t\n\t<\/tbody>\n<\/table>\n\n
\n
<\/th>\n\t\t\t <\/th>\n\t\t<\/tr>\n\t<\/thead>\n\t
\n\t\n\t\t\n\t\t\t\n\t\t\t
<\/td>\n\t\t\t Low Risk<\/td>\n\t\t\t Medium Risk<\/td>\n\t\t\t High Risk<\/td>\n\t\t\t Extreme Risk<\/td>\n\t\t<\/tr>\n\t\t
Data Storage (Active Storage) and Security<\/span><\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t\t All storage devices, file sharing, and cloud services are allowed, including both public and institutional cloud services.<\/span><\/span><\/span><\/span><\/span> Data should be <\/span>backed up <\/span>in a way that is consistent with the risk level associated with these data.<\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t\t Identifiable data should be stored on password-protected devices, in appropriate secure locations. If data need to be accessible through the internet, they should be encrypted.<\/span><\/span><\/span><\/span><\/span> Public cloud services<\/span> should not be used, unless no other options exist. If they are used, files and access should be password-protected and encrypted.<\/span><\/span><\/span><\/span><\/span> Private cloud services,<\/span> as supported by the research institution and\/or assessed as being secure, may be used. <\/span><\/span><\/span><\/span><\/span> Data should be <\/span>backed up<\/span> in a way that is consistent with the risk level associated with these data.<\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t\t All data should be stored on password-protected encrypted devices, in appropriate secure locations. If data need to be accessible through the internet, they should be encrypted.<\/span><\/span><\/span><\/span><\/span> Public cloud services<\/span> are strictly prohibited.<\/span><\/span><\/span><\/span><\/span> Private cloud services,<\/span> as supported by the research institution and\/or assessed as being secure may be used, if approved by the REB. <\/span><\/span><\/span><\/span><\/span> Data should be <\/span>backed up<\/span> in a way that is consistent with the risk level associated with these data.<\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t\t All data shall be stored on a centralized, stand-alone computer\/site that is both password protected and encrypted, in appropriate secure locations.<\/span><\/span><\/span><\/span><\/span> Data should be <\/span>backed up<\/span> in a way that is consistent with the risk level associated with these data.<\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t<\/tr>\n\t<\/tbody>\n<\/table>\n<\/div>\n\n
<\/div>\n\n
<\/div>\n"},"metadata":{"contentType":"Table","license":"U","title":"Table 5. Data Storage (Active Storage) Risk Matrix"},"subContentId":"0caf3794-399f-4ee8-981f-7c376484e4d3"},"useSeparator":"auto"}]},"library":"H5P.Column 1.18","subContentId":"e7a0e56b-6518-44e9-a9b9-d8547a8b2453","metadata":{"contentType":"Column","license":"U","title":"5. Data Storage (Active Storage) and Security Risk Matrix"}},{"params":{"content":[{"content":{"params":{"text":"
6. Data Mobility\/Data Sharing Risk Matrix<\/h2>\n\n
Having informed youself of the level of data risk associated with your project in the first two tables, this matrix will help you consider how data can be shared or transferred, including encryption and transfer techniques.<\/p>\n"},"library":"H5P.AdvancedText 1.1","metadata":{"contentType":"Text","license":"U","title":"Untitled Text"},"subContentId":"b4daf4f3-82da-47ba-a939-33d98a4ff4a5"},"useSeparator":"auto"},{"content":{"library":"H5P.Table 1.2","params":{"text":"
\n\t\n\t\t\n\t\t\t\n\t<\/tbody>\n<\/table>\n\n
\n
<\/th>\n\t\t\t <\/th>\n\t\t<\/tr>\n\t<\/thead>\n\t
\n\t\n\t\t\n\t\t\t\n\t\t\t
<\/td>\n\t\t\t Low Risk<\/td>\n\t\t\t Medium Risk<\/td>\n\t\t\t High Risk<\/td>\n\t\t\t Extreme Risk<\/td>\n\t\t<\/tr>\n\t\t
Data Mobility\/ Sharing<\/span><\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t\t Can be shared via email and all cloud services including <\/span>public cloud services<\/span>.<\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t\t Encrypted <\/span>and password-protected files can be shared via email and institution-approved <\/span>cloud services<\/span> or collaboration sites.<\/span><\/span><\/span><\/span><\/span> <\/span><\/span><\/span><\/span><\/td>\n\t\t\t \n\t\t\t
Restricted data shall only be shared with other members of the research team, as specified in the approved protocol. <\/span><\/span><\/span><\/span><\/span><\/div>\n\n\t\t\t
<\/div>\n\n\t\t\t
Files shall be encrypted and password protected. <\/span><\/span><\/span><\/span><\/span><\/div>\n\t\t\t<\/td>\n\t\t\t
\n\t\t\t
Data restricted to a centralized, stand-alone computer\/site that is password protected and encrypted.<\/span><\/span><\/span><\/span><\/span><\/div>\n\n\t\t\t
<\/div>\n\n\t\t\t
Files should not be copied or shared.<\/span><\/span><\/span><\/span><\/span><\/div>\n\n\t\t\t
<\/div>\n\n\t\t\t
ccess to data shall be restricted to authorized individuals explicitly identified in the REB protocol and should involve the smallest number of individuals possible. <\/span><\/span><\/span><\/span><\/span><\/div>\n\t\t\t<\/td>\n\t\t<\/tr>\n\t<\/tbody>\n<\/table>\n<\/div>\n\n
<\/div>\n"},"metadata":{"contentType":"Table","license":"U","title":"Table 6. Data Mobility\/Sharing Risk Matrix"},"subContentId":"843c629e-b350-4d6a-a917-a303d2c6397b"},"useSeparator":"auto"}]},"library":"H5P.Column 1.18","subContentId":"8f6980ec-3243-400a-afa2-e18229350a44","metadata":{"contentType":"Column","license":"U","title":"6. Data Mobility\/Data Sharing Risk Matrix"}},{"params":{"content":[{"useSeparator":"auto","content":{"params":{"text":"
7. Data Deposit and Access (incl. Secondary Use) Risk Matrix<\/h2>\n\n
Having informed youself of the level of data risk associated with your project in the first two tables, this matrix will help you consider your data deposit and access options. <\/p>\n"},"library":"H5P.AdvancedText 1.1","metadata":{"contentType":"Text","license":"U","title":"Untitled Text"},"subContentId":"e056372b-67b1-4318-add6-9c13ee73d081"}},{"content":{"library":"H5P.Table 1.2","params":{"text":"
\n\t\n\t\t\n\t\t\t\n\t<\/tbody>\n<\/table>\n\n
\n
<\/th>\n\t\t\t <\/th>\n\t\t<\/tr>\n\t<\/thead>\n\t
\n\t\n\t\t\n\t\t\t\n\t\t\t
<\/td>\n\t\t\t Low Risk<\/td>\n\t\t\t Medium Risk<\/td>\n\t\t\t High Risk<\/td>\n\t\t\t Extreme Risk<\/td>\n\t\t<\/tr>\n\t\t
\n\t\t\tData Mobility\/ Sharing<\/span><\/span><\/span><\/span><\/span><\/span>\n\t\t\t<\/td>\n\t\t\t \n\t\t\tCan be shared via email and all cloud services including <\/span>public cloud services<\/span>.<\/span><\/span><\/span><\/span><\/span>\n\t\t\t<\/td>\n\t\t\t \n\t\t\tEncrypted <\/span>and password-protected files can be shared via email and institution-approved <\/span>cloud services<\/span> or collaboration sites.<\/span><\/span><\/span><\/span><\/span>\n\n\t\t\t <\/span><\/span><\/span><\/span>\n\t\t\t<\/td>\n\t\t\t \n\t\t\tRestricted data shall only be shared with other members of the research team, as specified in the approved protocol. Files shall be encrypted and password protected. <\/span><\/span><\/span><\/span><\/span>\n\t\t\t<\/td>\n\t\t\t \n\t\t\tData restricted to a centralized, stand-alone computer\/site that is password protected and encrypted.<\/span><\/span><\/span><\/span><\/span>\n\n\t\t\tFiles should not be copied or shared.<\/span><\/span><\/span><\/span><\/span>\n\n\t\t\tAccess to data shall be restricted to authorized individuals explicitly identified in the REB protocol and should involve the smallest number of individuals possible. <\/span><\/span><\/span><\/span><\/span>\n\t\t\t<\/td>\n\t\t<\/tr>\n\t<\/tbody>\n<\/table>\n<\/div>\n"},"metadata":{"contentType":"Table","license":"U","title":"Table 7. Data Deposit and Access (incl. Secondary Use) Risk Matrix"},"subContentId":"72eedc43-addf-4492-8f9b-f0b365f8cc00"},"useSeparator":"auto"}]},"library":"H5P.Column 1.18","subContentId":"7b9adffa-d53e-4807-9741-f971518ab463","metadata":{"contentType":"Column","license":"U","title":"7. Data Deposit and Access (incl. Secondary Use) Risk Matrix"}},{"params":{"content":[{"useSeparator":"auto","content":{"params":{"text":"
8. Data Retention and Destruction Risk Matrix<\/h2>\n\n
Having informed youself of the level of data risk associated with your project in the previous two steps, this matrix will help you consider your data retention and data destruction provisions.<\/p>\n"},"library":"H5P.AdvancedText 1.1","metadata":{"contentType":"Text","license":"U","title":"Untitled Text"},"subContentId":"34ec6ba2-1e56-4216-87d5-d74525e4b05e"}},{"content":{"library":"H5P.Table 1.2","params":{"text":"
<\/div>\n\n\n\t\n\t\t\n\t\t\t\n\t\t\t
<\/td>\n\t\t\t Low Risk<\/td>\n\t\t\t Medium Risk<\/td>\n\t\t\t High Risk<\/td>\n\t\t\t Extreme Risk<\/td>\n\t\t<\/tr>\n\t\t
Data Retention and Destruction<\/span><\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t\t Data may be retained indefinitely for discovery, access, and archival purposes.<\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t\t Data may be retained indefinitely for discovery, access, and archival purposes. <\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t\t Data may be retained indefinitely for discovery, access, and archival purposes in accordance with the REB-approved protocol.<\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t\t Data must be destroyed at the earliest opportunity, in accordance with the REB-approved protocol. <\/span><\/span><\/span><\/span><\/span><\/td>\n\t\t<\/tr>\n\t<\/tbody>\n<\/table>\n\n
<\/div>\n\n
<\/div>\n"},"metadata":{"contentType":"Table","license":"U","title":"Table 8. Data Retention and Destruction Risk Matrix"},"subContentId":"fb2f692c-08bd-4c37-a20d-dc800d0c161b"},"useSeparator":"auto"}]},"library":"H5P.Column 1.18","subContentId":"d553f6ba-d137-48d6-8ad6-80f7569520df","metadata":{"contentType":"Column","license":"U","title":"8. Data Retention and Destruction Risk Matrix"}},{"params":{"content":[{"content":{"params":{"text":"
Laurier Research Data Management Supports<\/h2>\n\n
\n\t
Data Management Planning, Data Curation, and Publication\n\t
\n\t\t
Library Research Data Management Services<\/a><\/li>\n\t<\/ul>\n\t<\/li>\n\t
Research IT, Storage, IT Planning\n\t
\n\t\t
ICT: Technology to Support Research<\/a><\/li>\n\t<\/ul>\n\t<\/li>\n\t
Research Involving Human Participants\n\t
\n\t\t
Research Ethics Board<\/a><\/li>\n\t<\/ul>\n\t<\/li>\n<\/ul>\n\n
<\/p>\n"},"library":"H5P.AdvancedText 1.1","metadata":{"contentType":"Text","license":"U","title":"Untitled Text"},"subContentId":"ceb60686-2cd4-48cc-b61a-5a00c8654cea"},"useSeparator":"auto"}]},"library":"H5P.Column 1.18","subContentId":"7dedfc2c-05c9-4a2b-a6f7-9e326852de74","metadata":{"contentType":"Column","license":"U","title":"Get Support"}}],"behaviour":{"baseColor":"#1768c4","defaultTableOfContents":true,"progressIndicators":true,"progressAuto":true,"displaySummary":true},"read":"Read","displayTOC":"Display 'Table of contents'","hideTOC":"Hide 'Table of contents'","nextPage":"Next page","previousPage":"Previous page","chapterCompleted":"Page completed!","partCompleted":"@pages of @total completed","incompleteChapter":"Incomplete page","navigateToTop":"Navigate to the top","markAsFinished":"I have finished this page","fullscreen":"Fullscreen","exitFullscreen":"Exit fullscreen","bookProgressSubtext":"@count of @total pages","interactionsProgressSubtext":"@count of @total interactions","submitReport":"Submit Report","restartLabel":"Restart","summaryHeader":"Summary","allInteractions":"All interactions","unansweredInteractions":"Unanswered interactions","scoreText":"@score \/ @maxscore","leftOutOfTotalCompleted":"@left of @max interactions completed","noInteractions":"No interactions","score":"Score","summaryAndSubmit":"Summary & submit","noChapterInteractionBoldText":"You have not interacted with any pages.","noChapterInteractionText":"You have to interact with at least one page before you can see the summary.","yourAnswersAreSubmittedForReview":"Your answers are submitted for review!","bookProgress":"Book progress","interactionsProgress":"Interactions progress","totalScoreLabel":"Total score","a11y":{"progress":"Page @page of @total.","menu":"Toggle navigation menu"}}

Sensitive Data and Human Participant Research Data Risk Matrix

Brief Introduction

Michael Steeleworthy