Data Protection [2]

Table of Contents

About this resource
Introduction
Module 1: Your Digital Footprint
Module 2: Managing your Footprint
Module 3: Legal Obligations
1. Libel [1]
2. Libel [2]
3. Data Protection [1]
4. Data Protection [2]
5. Data Protection [3]
6. Copyright Infringement [1]
7. Copyright Infringement [2]
Summary

Data Protection [2]

Scenario 9.2

Sonia is wondering how she should store this data she is planning to gather for her dissertation, she intends to working on a fascinating study around domestic violence and will gather some sensitive data.

1

How would you advise Sonia in this situation?

	a)	Sonia should anonymise the data before she submits the study, and it should be fine to store it on a USB stick as that is really handy.
	b)	She should anonymise the material immediately as she is gathering it, and should be fine to store it on a memory stick.
	c)	She should anonymise the data and store it on Dropbox
	d)	Sonia can anonymise it and store it on Onedrive or an encrypted memory stick or password protected Word doc on her locked laptop.
Please select an answerSonia should anonymise the data as it is gathered and if she is going to store it on a USB stick, she should ensure that it is an encrypted USB stick that is kept securely. The College has signed an Undertaking with the Information Commissioners' Office that all personal data if held on any transportable device is encrypted to FIPS-140 or above.This is not appropriate as if she loses the USB stick, anyone who accesses it could probably establish exactly who the subjects are if they were determined and worked out who Sonia is. Further, the "key" should be stored in a separate location to the anonymised data. This is not appropriate. Although the data is anonymised, Dropbox is not EU hosted and not encrypted. It is not an appropriate location for sensitive research data. See the 8 data protection principles about storage in the EEA and security of cloud services https://ico.org.uk/for-organisations/guide-to-data-protection/data-protection-principles/ One Drive should be used in conjunction with the data security, data sharing guidance etc. If in any doubt contact the Legal Compliance department.