Starting from the End: What to do when Restricted Data is released. (23rd March 2017)

• Record Type: Journal Article
• Authors: Teperek, Marta; Morgan, Rhys; Ellefson, Michelle; Kingsley, Danny
• Is Part Of: Data science journal. Volume 16(2017)
• Publication Date: 2017-03-23
• Subjects: restricted data -- data release -- data security -- personal/sensitive data -- repository security -- data anonymisation; Science -- Data processing -- Periodicals; Database management -- Periodicals; 502.85
• DOI: 10.5334/dsj-2017-010
• Languages: English
• ISSNs: 1683-1470

Abstract

Repository managers can never be one hundred percent sure of the security of hosted research data. Even assuming that human errors and technical faults will never happen, repositories can be subject to hacking attacks. Therefore, repositories accepting personal/sensitive data (or other forms of restricted data) should have workflows in place with defined procedures to be followed should things go wrong and restricted data is inappropriately released. In this paper we will report on our considerations and procedures when restricted data from our institution was inappropriately released.