UCL INFORMATION SERVICES DIVISION IT for SLMS Infrastructure

UCL INFORMATION SERVICES DIVISION IT for SLMS Infrastructure for Sensitive Data at UCL James A J Wilson October 2019

Research Data Services at UCL

Research Data Services at UCL Usage Statistics (August 2019) Users 638 Studies 641 Storage used by projects 22. 5 TB

Data Safe Haven Overview • • Live since 2013 Service provides a technical solution for storing, handling and analysing identifiable data Providing a desktop experience (using Citrix Xen. Desktop technology), with the capability of providing database and server environments It has been expressly designed to meet the requirements of the NHS Information Governance Toolkit and has been certified to ISO 27001 Built using a walled garden approach, where the data is stored, processed and managed within the security of the system, avoiding the complexity of assured end point encryption A data transfer mechanism enables information to be transferred into the walled garden simply and securely (and exported with appropriate permissions) Dual factor authentication Security mechanisms ensure data can’t be accidentally removed from the Data Safe Haven environment 4

Data Safe Haven Topology 5

The Information Governance Toolkit Contains a set of requirements that have to be met Managed by NHS Digital and provides assurance to the Department of Health Required for Section 251 and is an option for other data providers, such as the ONS. UCL has adopted the ‘Hosted Secondary Use Team / Project’ view of the IG Toolkit. This is made up of 14 requirements Additional requirements for some data sets, such as ONS mortality

Data Safe Haven Roadmap • • • Significant improvements to compute power Petascale storage Hadoop/HDFS services for advanced analytics Rapid provisioning Metadata standardisation with the data repository Archiving

Wider Issues with Storing Sensitive Data • Sig