Commit faf79334 authored by Bernd Taschler's avatar Bernd Taschler
Browse files

update mentions of GDPR to UK GDPR (close #40)

parent c315e210
Pipeline #14108 passed with stages
in 2 minutes and 14 seconds
......@@ -87,11 +87,11 @@ Click on any of the images above to jump to each section.
<details>
<summary><html><body><i class="fas fa-exclamation-triangle"></i></body></html> <b>Are you sharing data acquired from living humans?</b></summary><br>
GDPR restrictions relate only to data acquired from living humans.
UK GDPR restrictions relate only to data acquired from living humans.
<p><b>Non-human</b> data are not required to be de-identified. Consider sharing your data on the <a href="https://open.win.ox.ac.uk/DigitalBrainBank/#/">Digital Brain Bank</a>.</p>
<p><b>Ex vivo human data</b> should be treated in accordance with the requirements of the Common Law Duty of Confidentiality. You should also be aware of the possibility of living individuals (for example relatives of the deceased) being identified in this information, which would then need to be treated in line with GDPR personal information. Please review the <a href="http://www.hra-decisiontools.org.uk/consent/principles-deceased.html">HRA Decision Tool for principles for handling data from deceased human participants</a>. Consider sharing your data on the <a href="https://open.win.ox.ac.uk/DigitalBrainBank/#/">Digital Brain Bank</a>.</p><br><br>
<p><b>Ex vivo human data</b> should be treated in accordance with the requirements of the Common Law Duty of Confidentiality. You should also be aware of the possibility of living individuals (for example relatives of the deceased) being identified in this information, which would then need to be treated in line with UK GDPR personal information. Please review the <a href="http://www.hra-decisiontools.org.uk/consent/principles-deceased.html">HRA Decision Tool for principles for handling data from deceased human participants</a>. Consider sharing your data on the <a href="https://open.win.ox.ac.uk/DigitalBrainBank/#/">Digital Brain Bank</a>.</p><br><br>
</details>
## Ethics
......@@ -128,14 +128,14 @@ Click on any of the images above to jump to each section.
<details>
<summary><html><body><i class="fas fa-exclamation-triangle"></i></body></html> <b>Are your imaging data in participant space?</b></summary><br>
Participant space (cortical structure) is unique to an individual and as such is an identifiable feature under GDPR. Avoid sharing data which is in participant space where possible. If it is preferable to share data in participant space, ensure other features described below are redacted as appropriate for your analysis.
Participant space (cortical structure) is unique to an individual and as such is an identifiable feature under UK GDPR. Avoid sharing data which is in participant space where possible. If it is preferable to share data in participant space, ensure other features described below are redacted as appropriate for your analysis.
<br><br>
</details>
<details>
<summary><html><body><i class="fas fa-exclamation-triangle"></i></body></html> <b>Have your Participant IDs been protected?</b></summary><br>
Are any keys which link researcher generated Participant IDs and WIN generated Scan IDs to GDPR "special category" data (names, contact information, consent documentation etc.) held in a facility which is surrounded by a suitable regime of controls and safeguards to prevent data breaches and misuse (<a href="https://cronfa.swan.ac.uk/Record/cronfa53688">Jones and Ford, 2018</a>)? In practice, this is achieved by following <a href="https://researchsupport.admin.ox.ac.uk/files/bpg09datacollectionandmanagementpdf">CUREC BPG 09</a>, with data only held on a approved shared drive (Departmental or One Drive), or a device with whole disk encryption.
Are any keys which link researcher generated Participant IDs and WIN generated Scan IDs to UK GDPR "special category" data (names, contact information, consent documentation etc.) held in a facility which is surrounded by a suitable regime of controls and safeguards to prevent data breaches and misuse (<a href="https://cronfa.swan.ac.uk/Record/cronfa53688">Jones and Ford, 2018</a>)? In practice, this is achieved by following <a href="https://researchsupport.admin.ox.ac.uk/files/bpg09datacollectionandmanagementpdf">CUREC BPG 09</a>, with data only held on a approved shared drive (Departmental or One Drive), or a device with whole disk encryption.
The linkage key must be "stored separately from" (<a href="https://researchsupport.admin.ox.ac.uk/files/bpg09datacollectionandmanagementpdf">CUREC BPG 09</a>) special category and research data, It must not be shared with research data except in critical circumstances. The validity of requests for access to the linkage key should be assessed on an individual basis by the responsible data controller (usually the Principle Investigator).
<br><br>
......
......@@ -62,7 +62,7 @@ Coming soon
{: .label .label-yellow }
### OpenNeuro
[OpenNeuro](https://openneuro.org) is a well known public MRI data sharing platform. It is developed and hosted in the USA, and as such it does not make provisions for data handling as required by GDPR.
[OpenNeuro](https://openneuro.org) is a well known public MRI data sharing platform. It is developed and hosted in the USA, and as such it does not make provisions for data handling as required by UK GDPR.
**If you would like to use OpenNeuro, we suggest you only share data in group space (for example MNI space) and not participant or native space, which remains identifiable. Be sure not to share the transform files which would enable group space data to be reverted to individual participant space.**
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment