UK Data Archive Microdata Access and the New ESRC Secure Data Service Melanie Wright, UKDA 2 nd Workshop on Data Access Cardiff, February 2009

UK Data Archive 40+ years experience preserving and providing access to social and economic data for research and teaching Operates a number of data services: ESDS, History Data Service, RELU, Survey Question Bank, and now SDS. ESRC-funded researchers must share data. Official Place of Deposit under Public Records Act International centre of expertise in data management, digital curation, data dissemination & support National member and current presidency of CESSDA Projects/services funded by a number of organisations, including ESRC, NERC, MRC, JISC and EC Located at University of Essex

UK Data Archive Differing Access Modes for Different Data End User License Special Conditions Special License / Approved Researcher Secure Data Service

UK Data Archive End User License Anonymised data, reduced detail (high level geographies, banded ages, outliers such as very large households removed, etc) Users register and give details of usage Sign standard end user license and promise not to share with unregistered users, not to try to identify individuals, to cite properly, to return publication references Data acquired through direct download of zipped data and documentation Tens of thousands of downloads per year

UK Data Archive Special Conditions As End User License in terms of data detail and methods of access, but users agree additional special conditions for usage at the time of ordering. Conditions vary and may include needing to have explicit depositor permission to access the data, requirement to destroy data after usage, requirement for a special form of citation, etc Often invoked for data considered somehow more sensitive

UK Data Archive Special License / Approved Researcher Primarily result of new Statistics Act Enables access to more highly detailed data (unbanded age, lower levels of geography, more detailed SOC codes) More vigorous vetting procedure by both UKDA and ONS with special forms, special license which specifies things like the conditions under which the data should be housed and handled Receive Guide to Good Data Housekeeping along with data download from a restricted download area Hundreds rather than tens of thousands pa

UK Data Archive Secure Data Service Two-year pilot began 1 October 2008 ESRC-funded and ONS-approved Remote access to sensitive and disclosive data held centrally All computation on secure central server; no data on local machines Outputs vetted for disclosure issues before release Expecting tens not hundreds of users in first instance

UK Data Archive Data Security Safe Data Safe People Safe Places Safe Outputs

UK Data Archive Safe Data Explicitly NOT safe data Data acquisition seems to be more about managing interest and expectations Longitudinal? Admin linkage? Business data? Detailed government social surveys? Census? UKDAs position as official Place of Deposit and its international reputation helps

UK Data Archive Safe Data Levels of protective marking TOP SECRET SECRET CONFIDENTIAL RESTRICTED PROTECT

UK Data Archive Restricted classification If accidentally or deliberately compromised will (amongst other things…): cause substantial distress to individuals; cause financial loss or loss of earning potential or to facilitate improper gain or advantage for individuals or companies; breach proper undertakings to maintain the confidence of information provided by third parties; to breach statutory restrictions on disclosure of information; affect diplomatic relations adversely.

UK Data Archive Safe People Registration with UKDA, authentification via Athens or Shibboleth Approved/Accredited Researcher process – additional information and agreements Training System-specific username/password; realtime auditing of sessions Breaches Penalties – individual and potentially institutional penalties

UK Data Archive Safe Places Central server security – machine and premises CITRIX security for remote connection – virtual safe place Possible use of bespoke thin clients Possible safe remote access rooms – currently in discussion as to whether/when necessary Audit trails are key – CITRIX allows realtime auditing and definition of suspicious keystroke sequences

UK Data Archive Safe Outputs Training is key Use of the system Responsibilities in law Good data housekeeping Statistical disclosure control Freedom to play on the central server; vetting only at point of publication Pilot use of automated disclosure assessment tools

UK Data Archive Safe Service Security Policy Asset management HR Security Physical and Environmental Security Communications and operations management Access control procedures Compliance with standards (BS/ISO 27001) Risk Assessment

UK Data Archive Carrots and Sticks When/why have breaches occurred in other secure data services? Poor understanding of disclosure Taking data home because work incomplete at the end of safe centre visit Taking data home for convenience of home working environment/tools/collaborations Providing access from home institution (if not office) is a POSITIVE SECURITY MEASURE Must be backed by training and effective and commensurate penalties

UK Data Archive

Collaboratories Make the service a home away from home with familiar tools and softwares Project specific filespaces with shared documents, analyses, etc -- reduces need for outputs to be taken away before publication stage Piloting Wiki-type community collaboration and support All levels of data (EUL to Secure) available Safe place for sensitive data merging

UK Data Archive securedata.ukda.ac.uk