add refs and links to appendicies

docs/decision-tree.md

@@ -28,14 +28,32 @@ principles](https://www.go-fair.org/fair-principles/)
 <a name="deidentify"></a>
 ## Process 3
 *to-do: explanatory text here*
+
+See also [Appendix 1](./decision-tree.md#dicom-scrub), [Appendix 2](./decision-tree.md#BIDS), [Appendix 3](./decision-tree.md#json-scrub), [Appendix 4](./decision-tree.md#qc), [Appendix 5](./decision-tree.md#deface).
 ![](../img/p3.png)
 
 <a name="metadata"></a>
 ## Process 4
 *to-do: explanatory text here*
+
+See also Appendix 1
 ![](../img/p4.png)
 
 <a name="sharing-attribution"></a>
 ## Process 5
 *to-do: explanatory text here*
+
+See also [Appendix 6](./decision-tree.md#upload), [Appendix 7](./decision-tree.md#data-freeze), [Appendix 8](./decision-tree.md#doi), [Appendix 9](./decision-tree.md#dua).
 ![](../img/p5.png)
+
+# References
+[DPIA screening and DPIA/DPA templates]
+(https://compliance.admin.ox.ac.uk/data-protection-forms#collapse1091641)
+
+Jones and Ford, 2018. "Privacy, confidentiality and practicalities in data linkage. National Statistical Quality Review". [https://cronfa.swan.ac.uk/Record/cronfa53688](https://cronfa.swan.ac.uk/Record/cronfa53688)
+
+Harron et al, 2017. "Challenges in administrative data linkage for research". Big Data & Society. December 2017. [doi:10.1177/2053951717745678](https://journals.sagepub.com/doi/10.1177/2053951717745678)
+
+[Open Brain Consent GDPR Edition](https://open-brain-consent.readthedocs.io/en/stable/gdpr/index.html)
+
+[CUREC Best Practice Guidance (BPG) 09 "Data collection, protection and management".](https://researchsupport.admin.ox.ac.uk/files/bpg09datacollectionandmanagementpdf)