Overview of LSHTM's approach to complying with EPSRC data management requirements, focussed on security requirements. Presented at Glasgow University on May 8th 2014

1. Complying with EPSRC Policy:
An LSHTM Case Study
Gareth Knight
Project Manager
LSHTM Research Data Management Service
This work is licensed under a
Creative Commons Attribution 2.0
UK: England & Wales License
8th May 2014
DCC Workshop:
Institutional compliance with EPSRC Policy Framework

2. EPSRC Principle 2
“EPSRC recognises that there are legal, ethical and
commercial constraints on release of research
data.”
“To ensure that the research process (including
the collaborative research process) is not
damaged by inappropriate release of data,
research organisation policies and practices
should ensure that these constraints are
considered at all stages in the research process”
http://www.epsrc.ac.uk/about/standards/researchdata/Pages/principles.aspx

3. Nature of Research Projects
Involve
Collaboration
• Each institution
contributes staff
time, data, or
other resources
• Difficult to split
data into
institutional
components ‐
require multiple
permissions to
share
Take place in
different locations
• Each country
has different
legal
requirements
& checks
• Require
government
permission –
gov. as a rights
holder
Involve research
participants
• Participant
consent must
be obtained
• Security
measures
must be apply
to meet Data
Protection Act
1998
Take place over
many years
• Collaboration
extends
beyond
funding period
• Require
consortium
agreement for
project &
post‐project
use
Research projects often....

4. RDM Support Approach
Identify & raise
awareness of
best practice
Promote
existing
resources
Summarise
information
Provide local
examples

5. To Share or not to Share:
An existing resource
1. Is the Sharing justified?
• What benefits will it provide?
• What are the risks associated with sharing data?
2. Do you have the ability to share?
• Intellectual Property Rights (IPR)
• Participant Consent
• Other obligations, e.g. confidentiality
3. Are there any conditions associated with
sharing?
• What measures need to be in place to protect
data? (e.g. record access requests, specific use
only)
The ICO publish several guides on data sharing & security useful for researchers.
http://www.ico.org.uk/for_organisations/data_protection/topic_guides/data_sharing
http://www.ico.org.uk/for_organisations/data_protection/topic_guides/anonymisation

6. Institutional
RDM Resources
RDM Site & Policy
Institutional DM Plan
http://www.lshtm.ac.uk/research/researchdataman/
http://blogs.lshtm.ac.uk/rdmss/outputs/rdplan-info/
Data Repository (WIP)
Sample Data Transfer Agreement
http://researchonline.lshtm.ac.uk/612422/

7. Final thoughts
• EPSRC principles inform good practice & provide baseline for
evaluation
• Responsible data sharing needed – balance security and
sharing obligations
• Researchers know their research topic – need practical help
with the technical and legal side
• A lot of information already available (ICO, UKDS, Clinical
Trials) – need to present it in easy‐to‐read form
• Effectiveness of communication ‐ PIs prefer one‐to‐one advice,
project staff enrol on training courses.

8. Did someone mention lunch?
http://blogs.lshtm.ac.uk/rdmss/
http://www.lshtm.ac.uk/research/researchdataman/
Email: Gareth.knight@lshtm.ac.uk researchdatamanagement@lshtm.ac.uk
Twitter: @gknight2000