Item 5.6 of the Agenda Remote access to confidential data for scientific purpose Jean-Marc Museux/ Aleksandra Bujnowska - Unit B2 Methodology and research 21 & 22 October 2009

Objectives To inform ITDG about Eurostat and ESS projects related to remote access to confidential data To exchange experiences and (tentatively) to issue recommendations for local infrastructure and networking aspects 21 & 22 October 2009 IT Directors Group

Background ESS commitment to value investment made for statistical data collection through easing/ improving access to confidential (micro) data for scientific purposes Direct Remote access to confidential data is the preferred solution for researchers to carry out scientific studies and policy evaluation 21 & 22 October 2009 IT Directors Group

Background Current mode of access (Regulation 831/2002) : Anonymised micro data sets released on CD-ROM (Scientific Use Files) under contract with scientific institution for identified research project Access to confidential data in Eurostat premises (Safe Centre) marginally (specific users like ECB and data collections: SES, CIS Remote access to confidential databases over internet secured connection is envisaged in many other projects coping with the exchange of confidential data between MS and Eurostat (EGR projects, data validation in transport statistics...) 21 & 22 October 2009 IT Directors Group

Remote access to confidential data for scientific purpose Discussed in ESS and international fora for several years (Workshop and UNECE work session, Statistical Confidentiality Committee – Working Group on Statistical Confidentiality, Eurostat Expert Groups, OECD-Eurostat ...) Successful experience in NL, SE, NO, (UK) … Solution to be promoted at ESS level in parallel with other modes of access (remote execution, Scientific Use Files, Safe centre) 21 & 22 October 2009 IT Directors Group

Remote access to confidential data for scientific purpose Eurostat Management Board has recently supported remote access as an alternative mode for the release of EU confidential data pending feasibility studies and cost analysis Requirement for the implementation of remote access Legal aspect Control / security aspects (authentication, contract ...) Methodological aspects (data preparation, output checking) Technical Infrastructure (secured servers, connection, software) 21 & 22 October 2009 IT Directors Group

First step (2010) IT infrastructure in Eurostat (tentative) Separated subnet (INTSECENV) Sharing firewall/router system Dedicated Authentication server Dedicated data server Dedicated Terminal Server VPN connection with token Softwares are available on the server 21 & 22 October 2009 IT Directors Group

Next steps (tentative) Develop and test remote access protocol Access from NSIs Euro Group Register (2010) – exchange of confidential data Access from NSIs safe centre – access for scientific purpose ESSnet on decentralised access to EU confidential dat feasibility study expected by March 2010 pilot on selected scenario in 2011 21 & 22 October 2009 IT Directors Group

Next steps (tentative) Direct access for scientific purpose Data archive network portal “connected” to (a network of) NSIs/Eurostat servers (project to be proposed under FP7 infrastructure for research line - 2010-2013) Eurostat direct remote access solution (?) Eurostat remote execution adhoc solution (from 2010 if need be) 21 & 22 October 2009 IT Directors Group